mirai | b92673c1d731425b61da34933fa398a5eb4e3221b6e995a889d1f01b1d2912c1 | Triage

Submit
Reports

Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

Static

static

95d79a8471...b7ab31

ubuntu-18.04-amd64

9

Sharing

General

Target

95d79a84717131ee31259cecfdb7ab31
Size

54KB
Sample

231220-ke8czsfdc7
MD5

95d79a84717131ee31259cecfdb7ab31
SHA1

b3fe88c1cbf6b04164f4af410db9ae6166adcf4b
SHA256

b92673c1d731425b61da34933fa398a5eb4e3221b6e995a889d1f01b1d2912c1
SHA512

420b60d6039fef8a14962f4a5cb600dfaf27efcc8a4db6f8ce5b2239efff0b2dc4b77797adeac99f875352759979ec4635d2ad3b2f6296a03a62dc49d1f6d50f
SSDEEP

768:dZCOH7Nq8o+FhqF4Ie6UjHKtpvkBABSQYrHROd3ku2VVkfVYMgwne383TkulhIZG:3CMhvqCUUjqt5BW9q3F2jkswefulh

Score

10^/10

mirai discovery linux

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

95d79a84717131ee31259cecfdb7ab31

Resource

ubuntu1804-amd64-20231215-en

ubuntu-18.04-amd64

5 signatures

150 seconds

Malware Config

Targets

- Target
  
  95d79a84717131ee31259cecfdb7ab31
- Size
  
  54KB
- MD5
  
  95d79a84717131ee31259cecfdb7ab31
- SHA1
  
  b3fe88c1cbf6b04164f4af410db9ae6166adcf4b
- SHA256
  
  b92673c1d731425b61da34933fa398a5eb4e3221b6e995a889d1f01b1d2912c1
- SHA512
  
  420b60d6039fef8a14962f4a5cb600dfaf27efcc8a4db6f8ce5b2239efff0b2dc4b77797adeac99f875352759979ec4635d2ad3b2f6296a03a62dc49d1f6d50f
- SSDEEP
  
  768:dZCOH7Nq8o+FhqF4Ie6UjHKtpvkBABSQYrHROd3ku2VVkfVYMgwne383TkulhIZG:3CMhvqCUUjqt5BW9q3F2jkswefulh
Score

9^/10

discovery
- Contacts a large (23517) amount of remote hosts
  This may indicate a network scan to discover remotely running services.
  discovery
- Creates a large amount of network flows
  This may indicate a network scan to discover remotely running services.
  discovery
- Changes its process name
- Modifies Watchdog functionality
  Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.
- Writes file to system bin folder
behavioral1

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Hijack Execution Flow

Privilege Escalation

Hijack Execution Flow

Defense Evasion

Hijack Execution Flow

Impair Defenses

Credential Access

Discovery

Network Service Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

© 2018-2025

Terms | Privacy

We care about your privacy.

This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.