General

  • Target

    d4bc13e225f0d5a05ad452ae66014874.elf

  • Size

    32KB

  • Sample

    231114-gxlp6ahc97

  • MD5

    d4bc13e225f0d5a05ad452ae66014874

  • SHA1

    a7e07cf7531864f193a32794e48c8978dc905529

  • SHA256

    0433abed1161da8a9c18a8855f9a65d9dd2ce66392107e989e058e510033f26e

  • SHA512

    28e3369dbb1a4dadaa195e6bd9d29cfd3dee5ec525a3c5612a811a5eae9ba35c3c65c8181918392f92eca02bc1c475b8b950014f794986700fe4ae0283e6564e

  • SSDEEP

    768:CevYysB+Aacd3vuOuOK/kqLfJ99qsulDlvVO4sMIOj6xTlnHYIF:CewyzAaM/uT/VmFgBR4I

Malware Config

Extracted

Family

mirai

Botnet

MIRAI

C2

client.orxy.space

Targets

    • Target

      d4bc13e225f0d5a05ad452ae66014874.elf

    • Size

      32KB

    • MD5

      d4bc13e225f0d5a05ad452ae66014874

    • SHA1

      a7e07cf7531864f193a32794e48c8978dc905529

    • SHA256

      0433abed1161da8a9c18a8855f9a65d9dd2ce66392107e989e058e510033f26e

    • SHA512

      28e3369dbb1a4dadaa195e6bd9d29cfd3dee5ec525a3c5612a811a5eae9ba35c3c65c8181918392f92eca02bc1c475b8b950014f794986700fe4ae0283e6564e

    • SSDEEP

      768:CevYysB+Aacd3vuOuOK/kqLfJ99qsulDlvVO4sMIOj6xTlnHYIF:CewyzAaM/uT/VmFgBR4I

    Score
    10/10
    • Mirai

      Mirai is a prevalent Linux malware infecting exposed network devices.

    • Changes its process name

    • Enumerates running processes

      Discovers information about currently running processes on the system

MITRE ATT&CK Matrix

Tasks