General

  • Target

    25148a67d4a633d2ecb4e4b88017e0c6.bin

  • Size

    33KB

  • Sample

    231010-bjyjxahf7t

  • MD5

    cc239819b474dc946282915822adb2c3

  • SHA1

    83104c3edcf415ed60329d38452e77606e4c0f6b

  • SHA256

    eead8beb53d42b8870d687cd697468c61dc26650e48870483292319b6b43ecde

  • SHA512

    bca28034467e01894a2dd1b9c57f9a326c47e6bc9a8a418e2ccffa0b6b00dc050381f010f19bfbc8e0b4f457b4d17364c848faf1fd84ed2116f200f1b7425dd2

  • SSDEEP

    768:LnlPFMj1JtpnVD8ywD3Ja8KbwuUXlVZhqe+UHJW:Lnlaj1JtvD8ywD5a8K8uUVV2efJW

Score
10/10

Malware Config

Extracted

Family

mirai

C2

wxd5cxqklilifh0m4pv8tg.dekma-gay.ru

Targets

    • Target

      9b840b89f921d1da241ee67885317188163f68c3c41e1f48c34796f89a96b07a.elf

    • Size

      66KB

    • MD5

      25148a67d4a633d2ecb4e4b88017e0c6

    • SHA1

      be09ab65625a1f2fd48969773b77d99c9c61ca6f

    • SHA256

      9b840b89f921d1da241ee67885317188163f68c3c41e1f48c34796f89a96b07a

    • SHA512

      1b7b65676a69c5b6982414c673b403dec688b5a7bea1a31c5192d7f5332ddd8d713b838dac1888d5ceb5a3fe37ca3378cc6a5acfea844d9da72a7d43f15951ce

    • SSDEEP

      1536:T/u7iGGEUDUmclqukZVyeKDkGM1bPXim1UzvpgxU1O:at1UDUXlqVVUkGMB7qzvUU1

    Score
    9/10
    • Contacts a large (23513) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

    • Changes its process name

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

MITRE ATT&CK Enterprise v15

Tasks