Overview

overview

10

Static

static

7

190fdbfcfa...JC.elf

debian-9-armhf

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    190fdbfcfad294880a48139bf003eea0841a165ceb80045201ae97a773c6d6d2_JC.elf

  • Size

    41KB

  • Sample

    231004-v428dafc86

  • MD5

    518d3882eba7ff2b72f574984ced1467

  • SHA1

    65c7895ed0359d6816ebf148b4d8b9d0d15d4a57

  • SHA256

    190fdbfcfad294880a48139bf003eea0841a165ceb80045201ae97a773c6d6d2

  • SHA512

    2d5533756b65e043fac8e3b12fd0c9bf63ffcf30eba53ba6c113bb4cd538f3216f250b7bb0e9290ba59fe4f8984fec539bc8be56fba71c05050095c52664d38b

  • SSDEEP

    768:9C3sdOmwXCUP0qgEpELCDN4Iq3UIfDWj2C9Udq2I+uxMUabW:A80Oqt1DefSqCezIVMvW

Score
10/10
miraibotnetupx

Malware Config

Targets

    • Target

      190fdbfcfad294880a48139bf003eea0841a165ceb80045201ae97a773c6d6d2_JC.elf

    • Size

      41KB

    • MD5

      518d3882eba7ff2b72f574984ced1467

    • SHA1

      65c7895ed0359d6816ebf148b4d8b9d0d15d4a57

    • SHA256

      190fdbfcfad294880a48139bf003eea0841a165ceb80045201ae97a773c6d6d2

    • SHA512

      2d5533756b65e043fac8e3b12fd0c9bf63ffcf30eba53ba6c113bb4cd538f3216f250b7bb0e9290ba59fe4f8984fec539bc8be56fba71c05050095c52664d38b

    • SSDEEP

      768:9C3sdOmwXCUP0qgEpELCDN4Iq3UIfDWj2C9Udq2I+uxMUabW:A80Oqt1DefSqCezIVMvW

    Score
    10/10
    miraibotnet

    • Mirai

      Mirai is a prevalent Linux malware infecting exposed network devices.

      botnetmirai

    • Changes its process name

    • Unexpected DNS network traffic destination

      Network traffic to other servers than the configured DNS servers was detected on the DNS port.

    • Enumerates active TCP sockets

      Gets active TCP sockets from /proc virtual filesystem.

    • Enumerates running processes

      Discovers information about currently running processes on the system

    behavioral1

MITRE ATT&CK Enterprise v15

Tasks