mirai | 759627072af146c085f1ed13b4494a79bc13ea4bdc97820366425f6698ad3eaa | Triage

Sharing

General

Target

tlsv3
Size

54KB
Sample

221123-klhqxacf5v
MD5

a7156b44bf5e43b06cae455319d69fa8
SHA1

6a7c1243a5aa0dc38fdfc444702677e342705913
SHA256

759627072af146c085f1ed13b4494a79bc13ea4bdc97820366425f6698ad3eaa
SHA512

5519ea6e2c992d8bea7425145ac1ab5e66cba31a17f1836780d34c757f0ee82898630a696aa8cb5a98a72098c047cebb1a8b911cc3d5b5371be9e6fb5c9cc844
SSDEEP

1536:JeESt/basV2rcZhG6ySN7naDlSR9zWOIaEjrqMKs:JeESt/basVTgS7naDQRVtXESx

Score

10^/10

mirai discovery linux

Malware Config

Extracted

Family

mirai

C2

cnc.bulletbot.xyz

Targets

- Target
  
  tlsv3
- Size
  
  54KB
- MD5
  
  a7156b44bf5e43b06cae455319d69fa8
- SHA1
  
  6a7c1243a5aa0dc38fdfc444702677e342705913
- SHA256
  
  759627072af146c085f1ed13b4494a79bc13ea4bdc97820366425f6698ad3eaa
- SHA512
  
  5519ea6e2c992d8bea7425145ac1ab5e66cba31a17f1836780d34c757f0ee82898630a696aa8cb5a98a72098c047cebb1a8b911cc3d5b5371be9e6fb5c9cc844
- SSDEEP
  
  1536:JeESt/basV2rcZhG6ySN7naDlSR9zWOIaEjrqMKs:JeESt/basVTgS7naDQRVtXESx
Score

9^/10

discovery
- Creates a large amount of network flows
  This may indicate a network scan to discover remotely running services.
  discovery
- Reads runtime system information
  Reads data from /proc virtual filesystem.
behavioral1

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Network Service Scanning

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks

static1

behavioral1