Overview

overview

10

Static

static

7

46914007e2...65621a

debian-9-armhf

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    46914007e2a8827805bb5bcf1d65621a

  • Size

    47KB

  • Sample

    231219-233abadce4

  • MD5

    46914007e2a8827805bb5bcf1d65621a

  • SHA1

    a55b01500f14a082bd9ee92f53bec2a176e4988f

  • SHA256

    fbb699718a8a4990849684e13ae4400d12f8527a17ff0b63a1d20cc6f90a185b

  • SHA512

    33464a7e3a99d94e0696e21d77cf29194413a4957d35b7d862925efe1731996c88841d454383c138d037c4c44072c386dfd460da1df86e260ea5be8e43cd663e

  • SSDEEP

    768:ISo9dHpHO313mavpBQzMinrIpWb99pejCJ3dA9q3UELFyl8SQqeaKikC+O:ISo97imavppirIpWPEsnLF08r7/U

Score
10/10
miraikaizenbotnetupx

Malware Config

Extracted

Family

mirai

Botnet

KAIZEN

Targets

    • Target

      46914007e2a8827805bb5bcf1d65621a

    • Size

      47KB

    • MD5

      46914007e2a8827805bb5bcf1d65621a

    • SHA1

      a55b01500f14a082bd9ee92f53bec2a176e4988f

    • SHA256

      fbb699718a8a4990849684e13ae4400d12f8527a17ff0b63a1d20cc6f90a185b

    • SHA512

      33464a7e3a99d94e0696e21d77cf29194413a4957d35b7d862925efe1731996c88841d454383c138d037c4c44072c386dfd460da1df86e260ea5be8e43cd663e

    • SSDEEP

      768:ISo9dHpHO313mavpBQzMinrIpWb99pejCJ3dA9q3UELFyl8SQqeaKikC+O:ISo97imavppirIpWPEsnLF08r7/U

    Score
    10/10
    miraikaizenbotnet

    • Mirai

      Mirai is a prevalent Linux malware infecting exposed network devices.

      botnetmirai

    • Enumerates active TCP sockets

      Gets active TCP sockets from /proc virtual filesystem.

    behavioral1

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Network Connections Discovery

1
T1049

System Network Configuration Discovery

1
T1016

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks