Overview

overview

10

Static

static

7

76c142ca9d...40.elf

debian-9-mips

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    76c142ca9d7c521e8df9a0cecd738b4657e107664a16174ec13f12ca275ee240.elf

  • Size

    24KB

  • Sample

    240222-gn53fach7t

  • MD5

    bd89bdd649e3b93cf4f1e1f1e01d148d

  • SHA1

    64d6fc965b145218bb1c13a58719b6ee8525c816

  • SHA256

    76c142ca9d7c521e8df9a0cecd738b4657e107664a16174ec13f12ca275ee240

  • SHA512

    9f1a625e422a6a10870cd49b976bec2b2b200a85a4acfb9dfa15007f490dc937d3d4809461e19eef41773793e2893b73d6db1806474d6ddfd0ef412862196afb

  • SSDEEP

    384:+BuRUHp0m+Mu5Ebfq+SWC720HDE+6KxHC64MpIsJmnap7udXhdvJBQJgGlzDpH7N:fRUzrbq3T9E+6MpIPa5GRdLQJgGlzDpB

Score
10/10
miraibotnetdiscoveryupx

Malware Config

Targets

    • Target

      76c142ca9d7c521e8df9a0cecd738b4657e107664a16174ec13f12ca275ee240.elf

    • Size

      24KB

    • MD5

      bd89bdd649e3b93cf4f1e1f1e01d148d

    • SHA1

      64d6fc965b145218bb1c13a58719b6ee8525c816

    • SHA256

      76c142ca9d7c521e8df9a0cecd738b4657e107664a16174ec13f12ca275ee240

    • SHA512

      9f1a625e422a6a10870cd49b976bec2b2b200a85a4acfb9dfa15007f490dc937d3d4809461e19eef41773793e2893b73d6db1806474d6ddfd0ef412862196afb

    • SSDEEP

      384:+BuRUHp0m+Mu5Ebfq+SWC720HDE+6KxHC64MpIsJmnap7udXhdvJBQJgGlzDpH7N:fRUzrbq3T9E+6MpIPa5GRdLQJgGlzDpB

    Score
    10/10
    miraibotnetdiscovery

    • Mirai

      Mirai is a prevalent Linux malware infecting exposed network devices.

      botnetmirai

    • Contacts a large (59780) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

      discovery

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

      discovery

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    • Enumerates active TCP sockets

      Gets active TCP sockets from /proc virtual filesystem.

    • Enumerates running processes

      Discovers information about currently running processes on the system

    behavioral1

MITRE ATT&CK Enterprise v15

Tasks