General

  • Target

    1d9768de015834a78ba323e0e6c3ded1.bin

  • Size

    35KB

  • MD5

    4a844fee441b309b504fb6da258f979a

  • SHA1

    feb877ac8eafcce53fd74ffa3807d150fcbbecab

  • SHA256

    ae6995585849f7c1af633d879b49bcd91718675dff54726d352413d0db1d953b

  • SHA512

    0cb10dfb48b37f1b1f04c46422191382483e4119f9e046e299080d5b9246dc6fa69b3f9d7385678f6108eccde177aa572ba7078ad28074b9939aa3ccdee722cd

  • SSDEEP

    768:AnK8hQzPMRwjzJwvTUzHqX3zje1QhpEydgih4Ste0M2JjZQ5I:9SQGU2X3nPPB+idQ6kI

Score
10/10

Malware Config

Extracted

Family

mirai

Botnet

ECCHI

C2

root.pizda.site

Signatures

  • Mirai family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

Files

  • 1d9768de015834a78ba323e0e6c3ded1.bin
    .zip

    Password: infected

  • d415cbae8e6ba03fd6ab3a91647f2df06123f5568429a936f4bd36f9a837e8ed.elf
    .elf linux x86