General

  • Target

    193536aff47438518e977dfac5f244f1f97fef3bfbda116cc8625040d9b15893_JC.elf

  • Size

    38KB

  • Sample

    231011-2sq5asbh82

  • MD5

    438b48b96fe2f9a0dc3d87fb9b152558

  • SHA1

    e9e4a1546e9dd2a6223b8ed29527e848af046137

  • SHA256

    193536aff47438518e977dfac5f244f1f97fef3bfbda116cc8625040d9b15893

  • SHA512

    2ecacc0bce2cb9951666c4b0fc17efc0ae2c9124ef908db42c41659d4952eb1eac054d56c995d0aa14271a4b11e6b884387cacbe64f84b53e85174568df5d89e

  • SSDEEP

    768:nwBoxj141HvaEWbJF6H/XEJOv7TWIhSivC13rgmJoVvLa/KDBnAhRJgGlzDpUYsh:Yo0aTJFo/XEOvHf5IR/kgVqYW

Malware Config

Targets

    • Target

      193536aff47438518e977dfac5f244f1f97fef3bfbda116cc8625040d9b15893_JC.elf

    • Size

      38KB

    • MD5

      438b48b96fe2f9a0dc3d87fb9b152558

    • SHA1

      e9e4a1546e9dd2a6223b8ed29527e848af046137

    • SHA256

      193536aff47438518e977dfac5f244f1f97fef3bfbda116cc8625040d9b15893

    • SHA512

      2ecacc0bce2cb9951666c4b0fc17efc0ae2c9124ef908db42c41659d4952eb1eac054d56c995d0aa14271a4b11e6b884387cacbe64f84b53e85174568df5d89e

    • SSDEEP

      768:nwBoxj141HvaEWbJF6H/XEJOv7TWIhSivC13rgmJoVvLa/KDBnAhRJgGlzDpUYsh:Yo0aTJFo/XEOvHf5IR/kgVqYW

    Score
    10/10
    • Mirai

      Mirai is a prevalent Linux malware infecting exposed network devices.

    • Contacts a large (441796) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

    • Changes its process name

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    • Writes file to system bin folder

MITRE ATT&CK Enterprise v15

Tasks