General

  • Target

    95fd2e552b33f1f5791c52dd521fa9a1

  • Size

    28KB

  • Sample

    231220-kf42yscddp

  • MD5

    95fd2e552b33f1f5791c52dd521fa9a1

  • SHA1

    2e8b5b94ac6b6f9b24c3f75236e491ed7e3b5d4a

  • SHA256

    39250267598519fb0115d0afa95315c059e39105bc58e841a457a3ec4da36d27

  • SHA512

    d06d026c28e7bbee421afcf6e67af29e40b8f07ad913ba0de09e91cb2fb9f8015b228cc8bf5e5c46d365be1be4774885a510b55a902722a25ef41ec8264e93ad

  • SSDEEP

    768:sk22MjBpLwGBwFmJpdGWWSPF9uRqS6QBCsqaWMl:5Mj3zBmmwz6buRqSprH

Score
10/10

Malware Config

Extracted

Family

mirai

Botnet

LZRD

Targets

    • Target

      95fd2e552b33f1f5791c52dd521fa9a1

    • Size

      28KB

    • MD5

      95fd2e552b33f1f5791c52dd521fa9a1

    • SHA1

      2e8b5b94ac6b6f9b24c3f75236e491ed7e3b5d4a

    • SHA256

      39250267598519fb0115d0afa95315c059e39105bc58e841a457a3ec4da36d27

    • SHA512

      d06d026c28e7bbee421afcf6e67af29e40b8f07ad913ba0de09e91cb2fb9f8015b228cc8bf5e5c46d365be1be4774885a510b55a902722a25ef41ec8264e93ad

    • SSDEEP

      768:sk22MjBpLwGBwFmJpdGWWSPF9uRqS6QBCsqaWMl:5Mj3zBmmwz6buRqSprH

    Score
    10/10
    • Mirai

      Mirai is a prevalent Linux malware infecting exposed network devices.

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    • Enumerates active TCP sockets

      Gets active TCP sockets from /proc virtual filesystem.

MITRE ATT&CK Enterprise v15

Tasks