mirai | 08b11375ee43745b196c0fb6cb4dc075b96215f310cadc682081373c63fe7ea6 | Triage

Sharing

General

Target

2dacea56d9f33e6fb5312294fa556114_JaffaCakes118
Size

56KB
Sample

240510-gm37fsef4w
MD5

2dacea56d9f33e6fb5312294fa556114
SHA1

df1cb1a55d9c96caea1181ca1ce6441fa2354afc
SHA256

08b11375ee43745b196c0fb6cb4dc075b96215f310cadc682081373c63fe7ea6
SHA512

17fc1d630943335333b5125946ab894dc42b2a491bf3cb9b65cd95bf566aba7fe9c4f2146db155c483fc756afcd7ff792140a4b2a73538b81d2d043e5437b724
SSDEEP

1536:87KNHwNpjmsU9AxyWPH3oligU+W+UkSskP98:87uKpCsU9A5P3SigU+W+NSsEe

Score

10^/10

mirai mirai discovery linux

Malware Config

Extracted

Family

mirai

Botnet

MIRAI

Targets

- Target
  
  2dacea56d9f33e6fb5312294fa556114_JaffaCakes118
- Size
  
  56KB
- MD5
  
  2dacea56d9f33e6fb5312294fa556114
- SHA1
  
  df1cb1a55d9c96caea1181ca1ce6441fa2354afc
- SHA256
  
  08b11375ee43745b196c0fb6cb4dc075b96215f310cadc682081373c63fe7ea6
- SHA512
  
  17fc1d630943335333b5125946ab894dc42b2a491bf3cb9b65cd95bf566aba7fe9c4f2146db155c483fc756afcd7ff792140a4b2a73538b81d2d043e5437b724
- SSDEEP
  
  1536:87KNHwNpjmsU9AxyWPH3oligU+W+UkSskP98:87uKpCsU9A5P3SigU+W+NSsEe
Score

9^/10

discovery
- Contacts a large (10081) amount of remote hosts
  This may indicate a network scan to discover remotely running services.
  discovery
- Deletes itself
- Modifies Watchdog functionality
  Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.
- Creates a large amount of network flows
  This may indicate a network scan to discover remotely running services.
  discovery
- Enumerates active TCP sockets
  Gets active TCP sockets from /proc virtual filesystem.
behavioral1

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Impair Defenses

Credential Access

Discovery

Network Service Discovery

System Network Connections Discovery

System Network Configuration Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks

static1

behavioral1