General

  • Target

    37767c30c4a4a87d6de191c1815621f3537de1688c726a6a55a6119346df816b

  • Size

    65KB

  • Sample

    240112-3bhl9sgdg4

  • MD5

    294f7bc9f9b5573592d0e91eaa7ee6e5

  • SHA1

    ad3f44b32344053b6a49a6432a874cb643be29aa

  • SHA256

    37767c30c4a4a87d6de191c1815621f3537de1688c726a6a55a6119346df816b

  • SHA512

    49357c043e8701e94411c9f59ae45dfb545100159d6d680c8b997aaa5226ff757955dc5f4159408eab4702abecbd33b3c6df445ee4026c973924c2c36a25bd21

  • SSDEEP

    1536:1CKyLkrrTpxSRDY+mugKjF3aLqrOH4gYZrX/S:1Z2krrT7SlYFojMLqgSrvS

Malware Config

Extracted

Family

mirai

Botnet

RAKITIN

Targets

    • Target

      37767c30c4a4a87d6de191c1815621f3537de1688c726a6a55a6119346df816b

    • Size

      65KB

    • MD5

      294f7bc9f9b5573592d0e91eaa7ee6e5

    • SHA1

      ad3f44b32344053b6a49a6432a874cb643be29aa

    • SHA256

      37767c30c4a4a87d6de191c1815621f3537de1688c726a6a55a6119346df816b

    • SHA512

      49357c043e8701e94411c9f59ae45dfb545100159d6d680c8b997aaa5226ff757955dc5f4159408eab4702abecbd33b3c6df445ee4026c973924c2c36a25bd21

    • SSDEEP

      1536:1CKyLkrrTpxSRDY+mugKjF3aLqrOH4gYZrX/S:1Z2krrT7SlYFojMLqgSrvS

    • Mirai

      Mirai is a prevalent Linux malware infecting exposed network devices.

    • Contacts a large (116569) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

MITRE ATT&CK Enterprise v15

Tasks