mirai | 8f34635582b40095852b614377c71e88c9cdeaeb832398ae53788a66babaee79 | Triage

Resubmissions

29-03-2023 07:38

230329-jgw73afc64 10

28-03-2023 09:01

230328-kyv7rsbg6y 10

Sharing

General

Target

x86.elf
Size

54KB
Sample

230328-kyv7rsbg6y
MD5

0594ee9b8c6882453e9bce4efef26ce8
SHA1

41b7b6276c2bb8fe9195d52326c97cae6688befc
SHA256

8f34635582b40095852b614377c71e88c9cdeaeb832398ae53788a66babaee79
SHA512

6f4e91fbf08a5f53dcc2aa49a3a2f0a81618b2fe416e12e41ceb35a561f723f737eb640fd64d8b0642b2d5f434604ba2051d2d11aaa1686cd9e61dd1717b6214
SSDEEP

1536:JeESt/basV2rcZhG6+KN7TqmlSR9zWOIaEjrqMes:JeESt/basVTgW7TqmQRVtXESt

Score

10^/10

mirai discovery linux

Malware Config

Targets

- Target
  
  x86.elf
- Size
  
  54KB
- MD5
  
  0594ee9b8c6882453e9bce4efef26ce8
- SHA1
  
  41b7b6276c2bb8fe9195d52326c97cae6688befc
- SHA256
  
  8f34635582b40095852b614377c71e88c9cdeaeb832398ae53788a66babaee79
- SHA512
  
  6f4e91fbf08a5f53dcc2aa49a3a2f0a81618b2fe416e12e41ceb35a561f723f737eb640fd64d8b0642b2d5f434604ba2051d2d11aaa1686cd9e61dd1717b6214
- SSDEEP
  
  1536:JeESt/basV2rcZhG6+KN7TqmlSR9zWOIaEjrqMes:JeESt/basVTgW7TqmQRVtXESt
Score

9^/10

discovery
- Contacts a large (25445) amount of remote hosts
  This may indicate a network scan to discover remotely running services.
  discovery
- Creates a large amount of network flows
  This may indicate a network scan to discover remotely running services.
  discovery
- Reads runtime system information
  Reads data from /proc virtual filesystem.
behavioral1

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Network Service Scanning

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks

static1

behavioral1