General

  • Target

    1534-1-0x0000000008048000-0x000000000805afe0-memory.dmp

  • Size

    69KB

  • Sample

    240104-mvjexageb9

  • MD5

    580ef9bcc1d52f49f552576503920cf9

  • SHA1

    aaa0c52598be1613c23730fee2564e34d4d553b1

  • SHA256

    4469e8bb5be3bd95c6e55ea62d87dc964a1ceb6707982b978cc8698e01f29038

  • SHA512

    de402e89cfe04480f660b67779e1c22dc4b3fc444f84142c62935d99840d35cbfa91219577c47671be89495aa4843437d494cd3a27abccbb93bf13a969166e93

  • SSDEEP

    1536:SySSvTK0C1vxhc3TJIxn/RCBPEkItXsdniBj+KuB5dF5jFJR:HTKZ1vrc3TJIxn/RCBPEkItX9lunPpFv

Malware Config

Extracted

Family

mirai

Botnet

RAKITIN

Targets

    • Target

      1534-1-0x0000000008048000-0x000000000805afe0-memory.dmp

    • Size

      69KB

    • MD5

      580ef9bcc1d52f49f552576503920cf9

    • SHA1

      aaa0c52598be1613c23730fee2564e34d4d553b1

    • SHA256

      4469e8bb5be3bd95c6e55ea62d87dc964a1ceb6707982b978cc8698e01f29038

    • SHA512

      de402e89cfe04480f660b67779e1c22dc4b3fc444f84142c62935d99840d35cbfa91219577c47671be89495aa4843437d494cd3a27abccbb93bf13a969166e93

    • SSDEEP

      1536:SySSvTK0C1vxhc3TJIxn/RCBPEkItXsdniBj+KuB5dF5jFJR:HTKZ1vrc3TJIxn/RCBPEkItX9lunPpFv

    Score
    9/10
    • Contacts a large (327480) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

MITRE ATT&CK Enterprise v15

Tasks