mirai | b838cef16faf264d4d082e56a112fc15bb5279163e3d6cb2641585beb62fe5a1 | Triage

Sharing

General

Target

x86.elf
Size

54KB
Sample

230328-kpvvmsbf9v
MD5

a7e5bd2b6d08eb711cd5478d60199e71
SHA1

2f2c7995e84487cf2f056d7498623a29a6a35db3
SHA256

b838cef16faf264d4d082e56a112fc15bb5279163e3d6cb2641585beb62fe5a1
SHA512

492f8b03f61f2d3c88d35def10df0b5173afe9fca535e1e0d0cbada5f7adb8ca29fcce81af3e58858e0b35ae8a79fd73334d7427e30976d669e1400b41cb6997
SSDEEP

1536:JeESt/basV2rcZhG6ySN7nayRe9xzWOIaEjrqMms:JeESt/basVTgS7nayw9BtXESt

Score

10^/10

mirai discovery linux

Malware Config

Extracted

Family

mirai

C2

botnnnaccgcc.xxbot.co

Targets

- Target
  
  x86.elf
- Size
  
  54KB
- MD5
  
  a7e5bd2b6d08eb711cd5478d60199e71
- SHA1
  
  2f2c7995e84487cf2f056d7498623a29a6a35db3
- SHA256
  
  b838cef16faf264d4d082e56a112fc15bb5279163e3d6cb2641585beb62fe5a1
- SHA512
  
  492f8b03f61f2d3c88d35def10df0b5173afe9fca535e1e0d0cbada5f7adb8ca29fcce81af3e58858e0b35ae8a79fd73334d7427e30976d669e1400b41cb6997
- SSDEEP
  
  1536:JeESt/basV2rcZhG6ySN7nayRe9xzWOIaEjrqMms:JeESt/basVTgS7nayw9BtXESt
Score

9^/10

discovery
- Contacts a large (37622) amount of remote hosts
  This may indicate a network scan to discover remotely running services.
  discovery
- Creates a large amount of network flows
  This may indicate a network scan to discover remotely running services.
  discovery
- Reads runtime system information
  Reads data from /proc virtual filesystem.
behavioral1

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Network Service Scanning

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks

static1

behavioral1