General

  • Target

    0dcd15c33019e7d6dd278313fdeb2492

  • Size

    65KB

  • Sample

    231219-2eppbabgf9

  • MD5

    0dcd15c33019e7d6dd278313fdeb2492

  • SHA1

    236046e34de90a847c4193719d16fd7f20437969

  • SHA256

    0e8af6871ab0a2ed9c522a01e56fd4792c9feb34c597557fd7d584d07fc54086

  • SHA512

    31f6d72290a12e9345e380cf2b44ab6109e0250d14cc3a80f87a74081290e27494e659427b9733da37e0242c94d8510c8d8828c928312c4aabcd6bd8a85606cf

  • SSDEEP

    768:s0bYeWD7AkgopE6aPisrCYimjShbscbl7XqM3dOMgOOOF35kHwzKxgYks3uzwIqU:TbYPDVgLKsrCR6Al76sb/O1SKxd3Ww

Malware Config

Extracted

Family

mirai

Botnet

REKAI

Targets

    • Target

      0dcd15c33019e7d6dd278313fdeb2492

    • Size

      65KB

    • MD5

      0dcd15c33019e7d6dd278313fdeb2492

    • SHA1

      236046e34de90a847c4193719d16fd7f20437969

    • SHA256

      0e8af6871ab0a2ed9c522a01e56fd4792c9feb34c597557fd7d584d07fc54086

    • SHA512

      31f6d72290a12e9345e380cf2b44ab6109e0250d14cc3a80f87a74081290e27494e659427b9733da37e0242c94d8510c8d8828c928312c4aabcd6bd8a85606cf

    • SSDEEP

      768:s0bYeWD7AkgopE6aPisrCYimjShbscbl7XqM3dOMgOOOF35kHwzKxgYks3uzwIqU:TbYPDVgLKsrCR6Al76sb/O1SKxd3Ww

    Score
    9/10
    • Contacts a large (30546) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

    • Reads system routing table

      Gets active network interfaces from /proc virtual filesystem.

MITRE ATT&CK Enterprise v15

Tasks