General

  • Target

    476c54bfd4cc22f01a2c088eb98fc32e57f8c840abcd9afbb2ea55acb3f1a3af

  • Size

    113KB

  • MD5

    f604e9632e144894c6233ff3f4468fc9

  • SHA1

    739fe88913a348f008bc0923dec54c7f187343f5

  • SHA256

    476c54bfd4cc22f01a2c088eb98fc32e57f8c840abcd9afbb2ea55acb3f1a3af

  • SHA512

    eae95b50f94d32f134060dc29ab436ab39779d6191fd6566ac0018c5a63489f8bcda7b8557001e6abb2b846a614fa579f74b856807db13980a93f19f24dcd941

  • SSDEEP

    3072:UgXgQUNqzZIPxFplgW2wzetJ8au49QuTsv6Mc1aIdtxAtc4kG7gyqc:cQXKpT6WdetJ8au4lQ6HtxAtc4n7gyqc

Malware Config

Signatures

  • Detect Mirai payload 1 IoCs
  • Detected Gafgyt variant 1 IoCs
  • Detected x86corona Mirai variant 1 IoCs

    File resembles variant of the Mirai bot which was first seen in early 2020.

  • Gafgyt family
  • Mirai family
  • Mirai_x86corona family

Files

  • 476c54bfd4cc22f01a2c088eb98fc32e57f8c840abcd9afbb2ea55acb3f1a3af
    .elf linux x86