General

  • Target

    6308353b159b2eda886a444788e50a4ddd1f975c37923eefd9bd81d7a12ac79d.elf

  • Size

    37KB

  • Sample

    241002-bpskvazdrp

  • MD5

    82f0be49be68bb081a66b148a403ef97

  • SHA1

    ba6a8dd1699918285fe79281eabafbcc9e5c4607

  • SHA256

    6308353b159b2eda886a444788e50a4ddd1f975c37923eefd9bd81d7a12ac79d

  • SHA512

    1336ca8fa1d407f22fe40ec6193b0b9538b2e5471b9584770cd3ac969ed7694fc6bda38ce4c85ceca6fc87ff0186461a1a99df110c8f3cd225d1a56111f21235

  • SSDEEP

    768:PtiNiNdNpdTleEbUzNSINoBoxjB+/LXvwXeso1onP8Sw4WMj:kNiNdNHQEIKZ/LYePI

Malware Config

Extracted

Family

mirai

Botnet

MIRAI

Targets

    • Target

      6308353b159b2eda886a444788e50a4ddd1f975c37923eefd9bd81d7a12ac79d.elf

    • Size

      37KB

    • MD5

      82f0be49be68bb081a66b148a403ef97

    • SHA1

      ba6a8dd1699918285fe79281eabafbcc9e5c4607

    • SHA256

      6308353b159b2eda886a444788e50a4ddd1f975c37923eefd9bd81d7a12ac79d

    • SHA512

      1336ca8fa1d407f22fe40ec6193b0b9538b2e5471b9584770cd3ac969ed7694fc6bda38ce4c85ceca6fc87ff0186461a1a99df110c8f3cd225d1a56111f21235

    • SSDEEP

      768:PtiNiNdNpdTleEbUzNSINoBoxjB+/LXvwXeso1onP8Sw4WMj:kNiNdNHQEIKZ/LYePI

    • Mirai

      Mirai is a prevalent Linux malware infecting exposed network devices.

    • Contacts a large (23675) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

    • File and Directory Permissions Modification

      Adversaries may modify file or directory permissions to evade defenses.

MITRE ATT&CK Enterprise v15

Tasks