Malware Analysis Report

2024-11-15 05:16

Sample ID 240419-ce81hseg3t
Target d61212c6fdd6ca3b1089639dee5089d0324195b595fb1e0b653a6f5ba9953871.elf
SHA256 d61212c6fdd6ca3b1089639dee5089d0324195b595fb1e0b653a6f5ba9953871
Tags
mirai mirai
score
10/10

Table of Contents

Analysis Overview

MITRE ATT&CK

Analysis: static1

Detonation Overview

Signatures

Analysis: behavioral1

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis Overview

score
10/10

SHA256

d61212c6fdd6ca3b1089639dee5089d0324195b595fb1e0b653a6f5ba9953871

Threat Level: Known bad

The file d61212c6fdd6ca3b1089639dee5089d0324195b595fb1e0b653a6f5ba9953871.elf was found to be: Known bad.

Malicious Activity Summary

mirai mirai

Mirai family

Changes its process name

Reads runtime system information

MITRE ATT&CK

N/A

Analysis: static1

Detonation Overview

Reported

2024-04-19 02:00

Signatures

Mirai family

mirai

Analysis: behavioral1

Detonation Overview

Submitted

2024-04-19 02:00

Reported

2024-04-19 02:03

Platform

debian9-armhf-20240226-en

Max time kernel

149s

Max time network

140s

Command Line

[/tmp/d61212c6fdd6ca3b1089639dee5089d0324195b595fb1e0b653a6f5ba9953871.elf]

Signatures

Changes its process name

Description Indicator Process Target
Changes the process name, possibly in an attempt to hide itself a /tmp/d61212c6fdd6ca3b1089639dee5089d0324195b595fb1e0b653a6f5ba9953871.elf N/A

Reads runtime system information

Description Indicator Process Target
File opened for reading /proc/3/maps N/A N/A
File opened for reading /proc/4/maps N/A N/A
File opened for reading /proc/5/maps N/A N/A
File opened for reading /proc/6/maps N/A N/A
File opened for reading /proc/1/maps N/A N/A
File opened for reading /proc/2/maps N/A N/A

Processes

/tmp/d61212c6fdd6ca3b1089639dee5089d0324195b595fb1e0b653a6f5ba9953871.elf

[/tmp/d61212c6fdd6ca3b1089639dee5089d0324195b595fb1e0b653a6f5ba9953871.elf]

Network

Country Destination Domain Proto
DE 185.117.3.184:3589 tcp
DE 185.117.3.184:3589 tcp
DE 185.117.3.184:3589 tcp

Files

N/A