Overview

overview

10

Static

static

7

x86.elf

ubuntu-18.04-amd64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    x86.elf

  • Size

    32KB

  • Sample

    231116-fgtkdsgh7v

  • MD5

    22bd06ae0d7a340b9d690b0ed7aedeef

  • SHA1

    834351d5ff88af96dbcc2cfcebd1be3b7a95edf0

  • SHA256

    0b4c5ec07f04c8b8a6ad6f185c6581a4b135adfd59ef7808da7daee5609d3e52

  • SHA512

    5cac4b59fada1b349e074fcb33c3653970b788171ab98cfd94f8b5bde8eeb6ac2f5fe634f7643654dc28440a8e781d81e4052f3a67fb8d601230427596406eb4

  • SSDEEP

    768:b+vtdTWUSEAF3O5+FYvanvr3cgXz5/edfkbTJGgKd:b+FdT9PAQ+3vr3byQTYgKd

Score
10/10
miraimiraibotnetlinuxupx

Malware Config

Extracted

Family

mirai

Botnet

MIRAI

C2

client.orxy.space

Targets

    • Target

      x86.elf

    • Size

      32KB

    • MD5

      22bd06ae0d7a340b9d690b0ed7aedeef

    • SHA1

      834351d5ff88af96dbcc2cfcebd1be3b7a95edf0

    • SHA256

      0b4c5ec07f04c8b8a6ad6f185c6581a4b135adfd59ef7808da7daee5609d3e52

    • SHA512

      5cac4b59fada1b349e074fcb33c3653970b788171ab98cfd94f8b5bde8eeb6ac2f5fe634f7643654dc28440a8e781d81e4052f3a67fb8d601230427596406eb4

    • SSDEEP

      768:b+vtdTWUSEAF3O5+FYvanvr3cgXz5/edfkbTJGgKd:b+FdT9PAQ+3vr3byQTYgKd

    Score
    10/10
    miraimiraibotnet

    • Mirai

      Mirai is a prevalent Linux malware infecting exposed network devices.

      botnetmirai

    • Changes its process name

    • Enumerates running processes

      Discovers information about currently running processes on the system

    behavioral1

MITRE ATT&CK Matrix

Tasks