Overview

overview

10

Static

static

7

Rakitin.x86.elf

ubuntu-18.04-amd64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Rakitin.x86.elf

  • Size

    32KB

  • Sample

    230605-ncjtdsgf6s

  • MD5

    48f97e290aa959cc70ebcb6354d8bbb0

  • SHA1

    c9da502fc937abc66bc2e6252cd0f4b18d26d40e

  • SHA256

    2254e1d82ec416bb2434a467dd6ecca2a8fd1f36183e361f64abbd35b2e87200

  • SHA512

    73c98e63b2c9d7fddb8f18750d21f21718899aa9a9e12fa644b299577c6dec707132a77ae7c93ab7aeec838e818fffb9f8fe369f64d3598c9668397f8b3a82d9

  • SSDEEP

    768:rFGCwzDOmKtu3DOmZA94cwfepdqqvPbw3JfuNiIEnDmbxj7FnbcuyD7UHQRje:BGCwzDmSKmq94cwUPb+8snDmp7FnouyM

Score
10/10
mirairakitinbotnetdiscoverylinuxupx

Malware Config

Extracted

Family

mirai

Botnet

RAKITIN

Targets

    • Target

      Rakitin.x86.elf

    • Size

      32KB

    • MD5

      48f97e290aa959cc70ebcb6354d8bbb0

    • SHA1

      c9da502fc937abc66bc2e6252cd0f4b18d26d40e

    • SHA256

      2254e1d82ec416bb2434a467dd6ecca2a8fd1f36183e361f64abbd35b2e87200

    • SHA512

      73c98e63b2c9d7fddb8f18750d21f21718899aa9a9e12fa644b299577c6dec707132a77ae7c93ab7aeec838e818fffb9f8fe369f64d3598c9668397f8b3a82d9

    • SSDEEP

      768:rFGCwzDOmKtu3DOmZA94cwfepdqqvPbw3JfuNiIEnDmbxj7FnbcuyD7UHQRje:BGCwzDmSKmq94cwUPb+8snDmp7FnouyM

    Score
    10/10
    mirairakitinbotnetdiscovery

    • Mirai

      Mirai is a prevalent Linux malware infecting exposed network devices.

      botnetmirai

    • Contacts a large (289765) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

      discovery

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

      discovery
    behavioral1

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Network Service Scanning

2
T1046

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks