mirai | 454752ad284cf07492c98d35c50d5efa715e92ea9879f890546554756049c023 | Triage

Sharing

General

Target

091fc2fb6b2ee21f4b20d5e3f8fce640_JaffaCakes118
Size

152KB
Sample

240430-f5a3ysea4v
MD5

091fc2fb6b2ee21f4b20d5e3f8fce640
SHA1

cc8af3f4c861ef6fac2de03f8a07cf3cb16201b9
SHA256

454752ad284cf07492c98d35c50d5efa715e92ea9879f890546554756049c023
SHA512

029eab4022e410e75944ad276e093b21e6ba260d5e40433c5f675e584d7215569ed28ccfc43980a9e1e58aaeb7cd809f5134a80efde62659d10e4bf81cee34fc
SSDEEP

3072:ES5T+cN5QKyKXvdM8gECKiE6/RaPNIMQwHKZB5XzGL5km2LSM/9EYzd:ES9+cN5QKyKXvdM8gce/RaPNIMQwqZj5

Score

10^/10

mirai lzrd discovery

Malware Config

Extracted

Family

mirai

Botnet

LZRD

Targets

- Target
  
  091fc2fb6b2ee21f4b20d5e3f8fce640_JaffaCakes118
- Size
  
  152KB
- MD5
  
  091fc2fb6b2ee21f4b20d5e3f8fce640
- SHA1
  
  cc8af3f4c861ef6fac2de03f8a07cf3cb16201b9
- SHA256
  
  454752ad284cf07492c98d35c50d5efa715e92ea9879f890546554756049c023
- SHA512
  
  029eab4022e410e75944ad276e093b21e6ba260d5e40433c5f675e584d7215569ed28ccfc43980a9e1e58aaeb7cd809f5134a80efde62659d10e4bf81cee34fc
- SSDEEP
  
  3072:ES5T+cN5QKyKXvdM8gECKiE6/RaPNIMQwHKZB5XzGL5km2LSM/9EYzd:ES9+cN5QKyKXvdM8gce/RaPNIMQwqZj5
Score

9^/10

discovery
- Contacts a large (24011) amount of remote hosts
  This may indicate a network scan to discover remotely running services.
  discovery
- Creates a large amount of network flows
  This may indicate a network scan to discover remotely running services.
  discovery
behavioral1

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Network Service Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks

static1

behavioral1