Overview

overview

10

Static

static

7

x86.elf

ubuntu-18.04-amd64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    x86.elf

  • Size

    16KB

  • Sample

    230603-kepwmsge21

  • MD5

    e4261dfc69029ca48d6767311e529a17

  • SHA1

    16b231e12a0e3e57fa10b20a7d395cb954af7247

  • SHA256

    e4205db7452d754076dbccf684ce5394fae2eb05fde666f6b2e5cb75e659abae

  • SHA512

    0d8639d5d3a0772060d53d798243e07454c96716710e3eedf5ac8096ce3a902431154eaea8bfeac8f6f8f665b1c140f9aedd0b481100b9a64899aa31fae8db84

  • SSDEEP

    384:Mwmhf5PCo2xLs5t/p1J5NE91BY89cm07YqDKxG:oxPymB7fK/C7Y4KxG

Score
10/10
miraibotnetlinuxupx

Malware Config

Extracted

Family

mirai

C2

193.35.18.42

Targets

    • Target

      x86.elf

    • Size

      16KB

    • MD5

      e4261dfc69029ca48d6767311e529a17

    • SHA1

      16b231e12a0e3e57fa10b20a7d395cb954af7247

    • SHA256

      e4205db7452d754076dbccf684ce5394fae2eb05fde666f6b2e5cb75e659abae

    • SHA512

      0d8639d5d3a0772060d53d798243e07454c96716710e3eedf5ac8096ce3a902431154eaea8bfeac8f6f8f665b1c140f9aedd0b481100b9a64899aa31fae8db84

    • SSDEEP

      384:Mwmhf5PCo2xLs5t/p1J5NE91BY89cm07YqDKxG:oxPymB7fK/C7Y4KxG

    Score
    10/10
    miraibotnet

    • Mirai

      Mirai is a prevalent Linux malware infecting exposed network devices.

      botnetmirai

    • Changes its process name

    • Enumerates running processes

      Discovers information about currently running processes on the system

    behavioral1

MITRE ATT&CK Matrix

Tasks