Overview

overview

10

Static

static

10

e5ccfabcc3...82.elf

ubuntu-18.04-amd64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    e5ccfabcc31bced7704971d5b530be82.elf

  • Size

    54KB

  • Sample

    240403-hkrw3sag89

  • MD5

    e5ccfabcc31bced7704971d5b530be82

  • SHA1

    2a47cf885031df9617bcb7b9f087b4fe61636734

  • SHA256

    b4bc5cc01376955cc2c2662630c7397ea7422caea2e533f3a61ba93b0adaf783

  • SHA512

    ed4e88731a400251f53ae4a570db4a67ebcbffe6bb0e35fc832dd728e3f13f1aa9318e32dcaa36ed34fc2d29eb2f63bdb4e236daab8736e0c19ba86b3a362de4

  • SSDEEP

    1536:JeESt/basV2rcZhG6+KN7Tq/pW1ZzWOIaEjrqMEs:JeESt/basVTgW7Tq/w1ptXESb

Score
10/10
miraidiscoverylinux

Malware Config

Extracted

Family

mirai

C2

botnet.618389.com

Targets

    • Target

      e5ccfabcc31bced7704971d5b530be82.elf

    • Size

      54KB

    • MD5

      e5ccfabcc31bced7704971d5b530be82

    • SHA1

      2a47cf885031df9617bcb7b9f087b4fe61636734

    • SHA256

      b4bc5cc01376955cc2c2662630c7397ea7422caea2e533f3a61ba93b0adaf783

    • SHA512

      ed4e88731a400251f53ae4a570db4a67ebcbffe6bb0e35fc832dd728e3f13f1aa9318e32dcaa36ed34fc2d29eb2f63bdb4e236daab8736e0c19ba86b3a362de4

    • SSDEEP

      1536:JeESt/basV2rcZhG6+KN7Tq/pW1ZzWOIaEjrqMEs:JeESt/basVTgW7Tq/w1ptXESb

    Score
    9/10
    discovery

    • Contacts a large (37622) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

      discovery

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

      discovery

    • Changes its process name

    • Enumerates running processes

      Discovers information about currently running processes on the system

    behavioral1

MITRE ATT&CK Matrix ATT&CK v13

Tasks