Overview

overview

10

Static

static

10

NEAS.NEASN...JC.elf

ubuntu-18.04-amd64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    NEAS.NEASNEASc140fa10a671261091ee5936bebcd03c41b4beeade6d7967a907eb3c05c339edelfelfelf_JC.elf

  • Size

    64KB

  • Sample

    231013-wm463scf9z

  • MD5

    584e3ef7fc82d5d87535a624686fa2da

  • SHA1

    ff6dcdab6699a048e406dd79e015fae9ca682ef3

  • SHA256

    c140fa10a671261091ee5936bebcd03c41b4beeade6d7967a907eb3c05c339ed

  • SHA512

    e9efa50aa2a66204c38bcf410a2245fadda2548b6da5adc644eabcff534286d6a76ebdd9c7229cce03bbfd31e19bdb9ae51e0641a9d5730076b1e521d761cf4e

  • SSDEEP

    1536:T562r5PIV8g4IVSFRhkiyzxyKu9HBYDlhW7TvOur:tvFzgLVSFDk5zx8Il0fvT

Score
10/10
mirailinux

Malware Config

Extracted

Family

mirai

C2

wxd5cxqklilifh0m4pv8tg.dekma-gay.ru

Targets

    • Target

      NEAS.NEASNEASc140fa10a671261091ee5936bebcd03c41b4beeade6d7967a907eb3c05c339edelfelfelf_JC.elf

    • Size

      64KB

    • MD5

      584e3ef7fc82d5d87535a624686fa2da

    • SHA1

      ff6dcdab6699a048e406dd79e015fae9ca682ef3

    • SHA256

      c140fa10a671261091ee5936bebcd03c41b4beeade6d7967a907eb3c05c339ed

    • SHA512

      e9efa50aa2a66204c38bcf410a2245fadda2548b6da5adc644eabcff534286d6a76ebdd9c7229cce03bbfd31e19bdb9ae51e0641a9d5730076b1e521d761cf4e

    • SSDEEP

      1536:T562r5PIV8g4IVSFRhkiyzxyKu9HBYDlhW7TvOur:tvFzgLVSFDk5zx8Il0fvT

    Score
    7/10

    • Changes its process name

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    behavioral1

MITRE ATT&CK Matrix ATT&CK v13

Tasks