General

  • Target

    1857d98e20a716d4b8381bde26ba504b8e8886f7f69dfff0f046e5ab5ece3bb9

  • Size

    124KB

  • MD5

    fde8ef51089713faa50e1146cb9b5d2c

  • SHA1

    bddeb1f9a06846d17c37cc9eceea763c254f743b

  • SHA256

    1857d98e20a716d4b8381bde26ba504b8e8886f7f69dfff0f046e5ab5ece3bb9

  • SHA512

    ba2eae1bfa2561dcd4a6ed9ff889f27897cb10b517a21332d81ef633de7a9818c770ba5e7754f1fd6e281aa9aea7fdd4b95cc49e0c4ace4a228ff88ec46caade

  • SSDEEP

    3072:EXY5gzI24XRFnHb2ohcQeFxfusim3ZnrhzD9oY4giAGaJpP:EXY5BDXR9dc5Om3ZndzD9oY4giAGaJpP

Malware Config

Signatures

  • Detect Mirai Payload 1 IoCs
  • Detected Gafgyt Variant 1 IoCs
  • Detected x86corona Mirai Variant 1 IoCs

    File resembles variant of the Mirai bot which was first seen in early 2020.

  • Gafgyt family
  • Mirai family
  • Mirai_x86corona family

Files

  • 1857d98e20a716d4b8381bde26ba504b8e8886f7f69dfff0f046e5ab5ece3bb9
    .elf linux x86