General

  • Target

    x-3.2-.SNOOPY

  • Size

    72KB

  • MD5

    24097f2aab5e81f8b53a86b1b853cd4b

  • SHA1

    5ba1cc0f99cbfb22078388810c13c42401de15c7

  • SHA256

    8c31c756fbe24c23f57c3101a5139e9ff203733890fbe8689ee6b4ec789f4d81

  • SHA512

    5a593967c1534adb6ea0acbf59ead95aaee1c3abde0d3523f95f8736710842a41a36809c40ae1eeb2bd978075a0bb74df1523efd564824971ea8e5b971133117

  • SSDEEP

    1536:0+xNVpyQWuKv8xKBnq5PeOj5zML4amLI2VOCjXUfJRk:nNTI30xKBnq9eGramU2VOCbUfJRk

Malware Config

Signatures

  • Detect Mirai Payload 1 IoCs
  • Detected Gafgyt Variant 1 IoCs
  • Detected x86corona Mirai Variant 1 IoCs

    File resembles variant of the Mirai bot which was first seen in early 2020.

  • Gafgyt family
  • Mirai family
  • Mirai_x86corona family

Files

  • x-3.2-.SNOOPY
    .elf linux x86