General

  • Target

    19d040891d7a6dd5e299a8657515df5ddddedc52b3ddb95adc13f97f0c2a9054.elf

  • Size

    147KB

  • Sample

    240906-bexf2sxenr

  • MD5

    900168a09c0bb099bb7f262aa85751d4

  • SHA1

    90ea3f7f9dc9db350ea494ecb2533cd91526fc71

  • SHA256

    19d040891d7a6dd5e299a8657515df5ddddedc52b3ddb95adc13f97f0c2a9054

  • SHA512

    6abe0ec4a9e7a69a2fb1e470af43642b98f2a9909fd5e900a43509abd6f1df719b8ad0d2f20abd6930d1102f1b7d64254faac7f74f95668550c22edb0c373077

  • SSDEEP

    3072:CJLce3pC5ma7/abHbz4NpaIJ8VIJ1FYUXkkTM/9cHMY:CJLce2/abHbz4NUIJxHYUXkYM/9gMY

Malware Config

Extracted

Family

mirai

C2

bot.proxies.codes

Targets

    • Target

      19d040891d7a6dd5e299a8657515df5ddddedc52b3ddb95adc13f97f0c2a9054.elf

    • Size

      147KB

    • MD5

      900168a09c0bb099bb7f262aa85751d4

    • SHA1

      90ea3f7f9dc9db350ea494ecb2533cd91526fc71

    • SHA256

      19d040891d7a6dd5e299a8657515df5ddddedc52b3ddb95adc13f97f0c2a9054

    • SHA512

      6abe0ec4a9e7a69a2fb1e470af43642b98f2a9909fd5e900a43509abd6f1df719b8ad0d2f20abd6930d1102f1b7d64254faac7f74f95668550c22edb0c373077

    • SSDEEP

      3072:CJLce3pC5ma7/abHbz4NpaIJ8VIJ1FYUXkkTM/9cHMY:CJLce2/abHbz4NUIJxHYUXkYM/9gMY

    Score
    9/10
    • Contacts a large (33285) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

    • Enumerates running processes

      Discovers information about currently running processes on the system

MITRE ATT&CK Enterprise v15

Tasks