General

  • Target

    e557aa3c011fa9a750cbcc239b42d4dbd3f02391a363705d347b9c913602d9d6.elf

  • Size

    138KB

  • Sample

    240213-gg788aac66

  • MD5

    f16db1d88c8a52cf85189f8610f144e4

  • SHA1

    f660f79452fe004005d888eabacda8d5331c462f

  • SHA256

    e557aa3c011fa9a750cbcc239b42d4dbd3f02391a363705d347b9c913602d9d6

  • SHA512

    599bd880d70973d72473206c784d303756adc7ffdb1393e33c65057e9bde407e126be82d2b1393a030547335226fe667534c6edfa9f2bc03ea56ba297dbc593a

  • SSDEEP

    3072:1plIgzzkQUz83Pj011qPoc38/24iOiHcRSO1mTKIrqfzuM05:1p9Q8wqv4igRSO8eIefzuH

Score
10/10

Malware Config

Extracted

Family

mirai

C2

haha.skyljne.click

Targets

    • Target

      e557aa3c011fa9a750cbcc239b42d4dbd3f02391a363705d347b9c913602d9d6.elf

    • Size

      138KB

    • MD5

      f16db1d88c8a52cf85189f8610f144e4

    • SHA1

      f660f79452fe004005d888eabacda8d5331c462f

    • SHA256

      e557aa3c011fa9a750cbcc239b42d4dbd3f02391a363705d347b9c913602d9d6

    • SHA512

      599bd880d70973d72473206c784d303756adc7ffdb1393e33c65057e9bde407e126be82d2b1393a030547335226fe667534c6edfa9f2bc03ea56ba297dbc593a

    • SSDEEP

      3072:1plIgzzkQUz83Pj011qPoc38/24iOiHcRSO1mTKIrqfzuM05:1p9Q8wqv4igRSO8eIefzuH

    Score
    9/10
    • Contacts a large (66464) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

    • Changes its process name

    • Enumerates running processes

      Discovers information about currently running processes on the system

MITRE ATT&CK Enterprise v15

Tasks