General

  • Target

    3a636db1000aa88f1efdde7e735b1c58394b828c5e5e3e6c77cebca5f141f3c7

  • Size

    120KB

  • MD5

    0f104951c76363dd6ff7db6634edb7b4

  • SHA1

    d29dc5595ab54621e5f7641a411340dd9bc4a03d

  • SHA256

    3a636db1000aa88f1efdde7e735b1c58394b828c5e5e3e6c77cebca5f141f3c7

  • SHA512

    081d0e70981f7bc1549dd979b37a97cc296a54078ea1efe072ec30e654f0501ecee7cbab9df8520b274f432eecae0265c54d13c522c16877ab414275b78a1603

  • SSDEEP

    3072:R+IIeP00LTSyYSX0CPiFYyD+wZAmml8chTj3aKYuM:sA1d1yD+wZAmml8chTj3aKYuM

Malware Config

Signatures

  • Detect Mirai Payload 1 IoCs
  • Detected Gafgyt Variant 1 IoCs
  • Detected x86corona Mirai Variant 1 IoCs

    File resembles variant of the Mirai bot which was first seen in early 2020.

  • Gafgyt family
  • Mirai family
  • Mirai_x86corona family

Files

  • 3a636db1000aa88f1efdde7e735b1c58394b828c5e5e3e6c77cebca5f141f3c7
    .elf linux x86