mirai | skid[.]x86-20220820-1520 | Triage

Sharing

General

Target

skid.x86-20220820-1520
Size

65KB
MD5

5536e3898d2a07bb09b95e21088391aa
SHA1

392eb8e1edccd7c7f6a9862e101729db1ea4233d
SHA256

2682fb8d9b10e4581eb71fba644bd0a1d5e9af45b078db3ceadfb463c9ffad80
SHA512

dc816bed672562a8a3ab7d457f04727e1e9a1a087891bf706fc1a368b7630d1822aa659c4a266c62bcffb61cf908906ef442b8b7f80d179e2dd41593d539082e
SSDEEP

1536:xyIZr5THgg+9zycTvJw8OYSOKYM1RIl1Ybza5VqylUraL:dZr5THcgcTvJ4YSOobIzYvSkypL

Score

10^/10

mirai mirai_x86corona

Malware Config

Signatures

Detect Mirai payload 1 IoCs

Processes:

resource yara_rule

sample family_mirai

Detected x86corona Mirai variant 1 IoCs

File resembles variant of the Mirai bot which was first seen in early 2020.

Processes:

resource	yara_rule
sample	family_mirai_x86corona

Mirai family
mirai
Mirai is a prevalent Linux malware infecting exposed network devices 1 IoCs
Detected Mirai Linux malware

Processes:

resource yara_rule

sample elf_mirai_auto
Mirai_x86corona family
mirai_x86corona

Files

skid.x86-20220820-1520
.elf linux x86