General

  • Target

    9ffd41a3cd5effed2c49e1546bd0b80a4bfc58fb32a0aff0bc698ea5954d77c3

  • Size

    107KB

  • MD5

    b887ca5c9cdc02aa4ee57caaa6fe6934

  • SHA1

    f862c9146962a5b27cc669ab76f70cf25cea0014

  • SHA256

    9ffd41a3cd5effed2c49e1546bd0b80a4bfc58fb32a0aff0bc698ea5954d77c3

  • SHA512

    9326af0bec529103a080711435cbfd36ee22a203387cb75f685a204c152ecc6beefd54fb951352b60d1db18683175016c9389129c6964c1786a57b297b036e19

  • SSDEEP

    3072:YMgYduU3UQRZ31VVcle/aI7cFxDHYuEo7adbBn:YM0yjZTWu3cFxDHYuEo7adbBn

Malware Config

Signatures

  • Detect Mirai payload 1 IoCs
  • Detected Gafgyt variant 1 IoCs
  • Detected x86corona Mirai variant 1 IoCs

    File resembles variant of the Mirai bot which was first seen in early 2020.

  • Gafgyt family
  • Mirai family
  • Mirai_x86corona family

Files

  • 9ffd41a3cd5effed2c49e1546bd0b80a4bfc58fb32a0aff0bc698ea5954d77c3
    .elf linux x86