Overview

overview

10

Static

static

10

x86.elf

ubuntu-18.04-amd64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    x86.elf

  • Size

    61KB

  • Sample

    230331-y4zc9see2y

  • MD5

    97c7da45e1945f715491db153f510f84

  • SHA1

    4de5d0b318a1de1193e6d720453741349fa782cc

  • SHA256

    e48402ca5c8a1c9f74472379de20759b9f62d897069272ba8f71176c40acf620

  • SHA512

    13f824ddd22d0abcd7b34007c4e2f2a317f1432c64fd6dd326e7efa57ad9321e236a8b8f74a83f143b207b9a6cc6f82fc201217bfe87ab0caad9c70dd5946613

  • SSDEEP

    1536:Z7qARubgzY/bEJyrRcpk80LDHhklv4JQC9DSW:NP+eY/bEJJ4XBk9AP9l

Score
10/10
miraiwickeddiscoverylinux

Malware Config

Extracted

Family

mirai

Botnet

WICKED

Targets

    • Target

      x86.elf

    • Size

      61KB

    • MD5

      97c7da45e1945f715491db153f510f84

    • SHA1

      4de5d0b318a1de1193e6d720453741349fa782cc

    • SHA256

      e48402ca5c8a1c9f74472379de20759b9f62d897069272ba8f71176c40acf620

    • SHA512

      13f824ddd22d0abcd7b34007c4e2f2a317f1432c64fd6dd326e7efa57ad9321e236a8b8f74a83f143b207b9a6cc6f82fc201217bfe87ab0caad9c70dd5946613

    • SSDEEP

      1536:Z7qARubgzY/bEJyrRcpk80LDHhklv4JQC9DSW:NP+eY/bEJJ4XBk9AP9l

    Score
    9/10
    discovery

    • Contacts a large (87592) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

      discovery

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

      discovery
    behavioral1

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Network Service Scanning

2
T1046

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks