General
-
Target
60039878a74f088d33a6d0a3771aedf387ecf0ec5187402a6406c3b8e263cb8a
-
Size
66KB
-
Sample
221125-mbfjxaaa37
-
MD5
7f4c810359f1c15cba2de83b0a9a4984
-
SHA1
cafe119831a6ba613e71abf82c8e3e8896f7fadf
-
SHA256
60039878a74f088d33a6d0a3771aedf387ecf0ec5187402a6406c3b8e263cb8a
-
SHA512
141509162177f0b73f1f56f107529829d70c2cf7f5ce8000d0a2750e7d9b11d89022896e1a1f8caa952ab6ed3715e27da7e6c9a1c9aed5f3f9537b9dc0d7c824
-
SSDEEP
1536:TtnY01jAj/sGL0P8sSqVmJH5fIF3pB3m2dlVZi/O9Dap:0j/jwUsSPH5fIF3pBLgO9ep
Behavioral task
behavioral1
Sample
60039878a74f088d33a6d0a3771aedf387ecf0ec5187402a6406c3b8e263cb8a
Resource
debian9-armhf-20221111-en
Malware Config
Extracted
mirai
MIRAI
proxy.2u0apcm6ylhdy7s.com
t.2u0apcm6ylhdy7s.com
Targets
-
-
Target
60039878a74f088d33a6d0a3771aedf387ecf0ec5187402a6406c3b8e263cb8a
-
Size
66KB
-
MD5
7f4c810359f1c15cba2de83b0a9a4984
-
SHA1
cafe119831a6ba613e71abf82c8e3e8896f7fadf
-
SHA256
60039878a74f088d33a6d0a3771aedf387ecf0ec5187402a6406c3b8e263cb8a
-
SHA512
141509162177f0b73f1f56f107529829d70c2cf7f5ce8000d0a2750e7d9b11d89022896e1a1f8caa952ab6ed3715e27da7e6c9a1c9aed5f3f9537b9dc0d7c824
-
SSDEEP
1536:TtnY01jAj/sGL0P8sSqVmJH5fIF3pB3m2dlVZi/O9Dap:0j/jwUsSPH5fIF3pBLgO9ep
Score9/10-
Creates a large amount of network flows
This may indicate a network scan to discover remotely running services.
-
Enumerates active TCP sockets
Gets active TCP sockets from /proc virtual filesystem.
-
Reads system network configuration
Uses contents of /proc filesystem to enumerate network settings.
-
Reads runtime system information
Reads data from /proc virtual filesystem.
-