General

  • Target

    910c5eb085dd01ea38e0e19ade69c111.bin

  • Size

    67KB

  • Sample

    240111-dmpghsecf8

  • MD5

    35ba4e221766dbee732ddd99eccc04c4

  • SHA1

    9f6f7fd00e5c3e015539393b5d09a78667881c7e

  • SHA256

    3bd4977cf7a4f5a0d1419fa3ee8a57d7c619f2478c07cd9d8343e72a3da355e7

  • SHA512

    9beb61c74509a489b04b85274effb2c0602f679dbc5b511d73715029b474577344bffd34fbd4d31fea878c878c6c2ebe7abafae70ed70cd5273b11e72668d0e1

  • SSDEEP

    1536:VvmLenfoy3qEKp0J/ppz1hB/DQEDAggFiRzPTD:Vv4enfhntf/8qgFEPX

Score
10/10

Malware Config

Extracted

Family

mirai

C2

bngoc.skyljne.click

Targets

    • Target

      b5f00e256c6a42e17e09cbfb08a5d1260400847bf06bc61f2988b20b12a91373.elf

    • Size

      148KB

    • MD5

      910c5eb085dd01ea38e0e19ade69c111

    • SHA1

      64d265a3410a80d3ca02a8d0587223f4517e0789

    • SHA256

      b5f00e256c6a42e17e09cbfb08a5d1260400847bf06bc61f2988b20b12a91373

    • SHA512

      db254bc2bc64919e612c50037c63df1e4534e09d76482481b85b585cb22f079c95f1f0ac562b2637029b35a0f072aba0e520ef7f8215058c9d1a1a0898896cd1

    • SSDEEP

      3072:gmS+/m2wCA4NESxvFTG4HAlIZ5FW33rvfmMIWcdsz:gmQuESRNG4HPZ5FYrvfm8cdsz

    Score
    9/10
    • Contacts a large (86555) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

    • Changes its process name

    • Enumerates running processes

      Discovers information about currently running processes on the system

MITRE ATT&CK Enterprise v15

Tasks