General

  • Target

    NEAS.24ddc889d852d1841a94d4f989fc0aac378d590ca638113e00de86314488c5acelf_JC.elf

  • Size

    184KB

  • Sample

    231006-p75vsadg76

  • MD5

    a6aaa67f7d6026c0fa88dfe9f97ff253

  • SHA1

    c7f5d46879a5bf2709373f3df1d463dfde16e0b6

  • SHA256

    24ddc889d852d1841a94d4f989fc0aac378d590ca638113e00de86314488c5ac

  • SHA512

    87cc20c9d28b7bcd0836b0d5770cf42e4e1b1198ddf09d76c04de1328f79bc7b657dc43b6cecd250f65b8c56679cbdcf5c9acda470573a25d6055be2896b4df2

  • SSDEEP

    3072:rEJSoWTK7PqDJ3IVaGylBnDC04mlxB3qKa2whKo/RM/RTyJq:rEUoXPql4VaGylBnDx1BFa2arpM/R2o

Score
10/10

Malware Config

Extracted

Family

mirai

C2

cnc.condi.cloud

Targets

    • Target

      NEAS.24ddc889d852d1841a94d4f989fc0aac378d590ca638113e00de86314488c5acelf_JC.elf

    • Size

      184KB

    • MD5

      a6aaa67f7d6026c0fa88dfe9f97ff253

    • SHA1

      c7f5d46879a5bf2709373f3df1d463dfde16e0b6

    • SHA256

      24ddc889d852d1841a94d4f989fc0aac378d590ca638113e00de86314488c5ac

    • SHA512

      87cc20c9d28b7bcd0836b0d5770cf42e4e1b1198ddf09d76c04de1328f79bc7b657dc43b6cecd250f65b8c56679cbdcf5c9acda470573a25d6055be2896b4df2

    • SSDEEP

      3072:rEJSoWTK7PqDJ3IVaGylBnDC04mlxB3qKa2whKo/RM/RTyJq:rEUoXPql4VaGylBnDx1BFa2arpM/R2o

    Score
    9/10
    • Contacts a large (45738) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

    • Changes its process name

    • Enumerates running processes

      Discovers information about currently running processes on the system

MITRE ATT&CK Enterprise v15

Tasks