General

  • Target

    SecuriteInfo.com.Linux.Siggen.9999.15798.13010.elf

  • Size

    38KB

  • Sample

    240104-pmq6wsaaf6

  • MD5

    56e1f31b39996910619d83307ff5d31f

  • SHA1

    35aff96ff04ff0a6662b91a82c89c9acd2d2d1b1

  • SHA256

    5a0b0ae84cb32f1eadd65aa8f0170aace11fb23e8eee730dd6ec23ff80a1155b

  • SHA512

    071cfa9b8f0ca1f087d137066e7d3cba3a3bd09cc77212cecf3b24741d88bfb0c506509fb8c25583bff52b2da4ec531a72d83868b914ada964861089d8999c43

  • SSDEEP

    768:OxcLgjTAOdIOdQaYvGxUCREjEoD/YkNGll4U8QupNdRegl38s3Uozb:OxMAhdhO1UU5jX7U7rYdFR5zb

Malware Config

Extracted

Family

mirai

Botnet

RAKITIN

Targets

    • Target

      SecuriteInfo.com.Linux.Siggen.9999.15798.13010.elf

    • Size

      38KB

    • MD5

      56e1f31b39996910619d83307ff5d31f

    • SHA1

      35aff96ff04ff0a6662b91a82c89c9acd2d2d1b1

    • SHA256

      5a0b0ae84cb32f1eadd65aa8f0170aace11fb23e8eee730dd6ec23ff80a1155b

    • SHA512

      071cfa9b8f0ca1f087d137066e7d3cba3a3bd09cc77212cecf3b24741d88bfb0c506509fb8c25583bff52b2da4ec531a72d83868b914ada964861089d8999c43

    • SSDEEP

      768:OxcLgjTAOdIOdQaYvGxUCREjEoD/YkNGll4U8QupNdRegl38s3Uozb:OxMAhdhO1UU5jX7U7rYdFR5zb

    • Mirai

      Mirai is a prevalent Linux malware infecting exposed network devices.

    • Contacts a large (116574) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

MITRE ATT&CK Enterprise v15

Tasks