General

  • Target

    5407a3577befd22a6024d7c817c7d08e.elf

  • Size

    28KB

  • Sample

    240111-y7f14agfg6

  • MD5

    5407a3577befd22a6024d7c817c7d08e

  • SHA1

    2ef2ec1e0cf696adc94ed991c8c41e7677817ec3

  • SHA256

    134f7bdcc085a6b6496b979129a0046633f3334834ac72e822323be9f0e74f99

  • SHA512

    add4c9583147931be75f017105e824a41ca7d6fc8f35fb92dc31fb82a212e2f4a841002ba339019df1719de6032a2e015937d3690b5a8d1381ab681e2bdd940b

  • SSDEEP

    768:4u10uwKSUh7UaQIFjnqajSPwOTFOZ5jDnbcuyD7URQRjR:Z10EQaJhhSDFOZNDnouy8Ryl

Malware Config

Extracted

Family

mirai

Botnet

PUTIN

C2

howareyoutoday.co.vu

Targets

    • Target

      5407a3577befd22a6024d7c817c7d08e.elf

    • Size

      28KB

    • MD5

      5407a3577befd22a6024d7c817c7d08e

    • SHA1

      2ef2ec1e0cf696adc94ed991c8c41e7677817ec3

    • SHA256

      134f7bdcc085a6b6496b979129a0046633f3334834ac72e822323be9f0e74f99

    • SHA512

      add4c9583147931be75f017105e824a41ca7d6fc8f35fb92dc31fb82a212e2f4a841002ba339019df1719de6032a2e015937d3690b5a8d1381ab681e2bdd940b

    • SSDEEP

      768:4u10uwKSUh7UaQIFjnqajSPwOTFOZ5jDnbcuyD7URQRjR:Z10EQaJhhSDFOZNDnouy8Ryl

    Score
    10/10
    • Mirai

      Mirai is a prevalent Linux malware infecting exposed network devices.

    • Changes its process name

    • Deletes itself

    • Unexpected DNS network traffic destination

      Network traffic to other servers than the configured DNS servers was detected on the DNS port.

MITRE ATT&CK Matrix

Tasks