General

  • Target

    0xh0roxxnavebusyoox86elf.elf

  • Size

    56KB

  • Sample

    230702-pg2qface8z

  • MD5

    6599aed7545666a669955a5dad4ac5d4

  • SHA1

    c85f6bfbf6b126108ad544d99fca4c4acf939ed6

  • SHA256

    ccf9d897245c4fc71a724850cb363851c179ec827f0ef9fa1881de34107969e6

  • SHA512

    8248cd66a75214856ed705f1b590ef82d92279b20224a54e9a2f0f74bf1fb3d2f071607c7385e19c3985b9d806264260d247ad9100b8b9f544e7cf8d4c1ddef5

  • SSDEEP

    1536:CVKFOD7prJkaNup1COy7O/HgeXDaLiwui7EPZP8x9:XFOXprOfPTy7yHgeXDaLru31Q

Score
10/10

Malware Config

Extracted

Family

mirai

C2

hihi.mirailovers.pw

Targets

    • Target

      0xh0roxxnavebusyoox86elf.elf

    • Size

      56KB

    • MD5

      6599aed7545666a669955a5dad4ac5d4

    • SHA1

      c85f6bfbf6b126108ad544d99fca4c4acf939ed6

    • SHA256

      ccf9d897245c4fc71a724850cb363851c179ec827f0ef9fa1881de34107969e6

    • SHA512

      8248cd66a75214856ed705f1b590ef82d92279b20224a54e9a2f0f74bf1fb3d2f071607c7385e19c3985b9d806264260d247ad9100b8b9f544e7cf8d4c1ddef5

    • SSDEEP

      1536:CVKFOD7prJkaNup1COy7O/HgeXDaLiwui7EPZP8x9:XFOXprOfPTy7yHgeXDaLru31Q

    Score
    7/10
    • Changes its process name

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

MITRE ATT&CK Enterprise v6

Tasks