General

  • Target

    6f3a4a076d6b50ddc1d6caeb07fe23813128ba2bf032f9115d8f55e344ccb4b1.elf

  • Size

    36KB

  • Sample

    241002-bqe15stepd

  • MD5

    8580cdc2029cafca09e91526ab00468d

  • SHA1

    35f33d253414de7d01683107be22ae60b5668041

  • SHA256

    6f3a4a076d6b50ddc1d6caeb07fe23813128ba2bf032f9115d8f55e344ccb4b1

  • SHA512

    be209112a270ce04acd3b46183a861782481d90362c90012cc54c79aa64cdc7d2788225c00d6fce82045c5727776d97b778b46cd50714455c6ec42696202ccfb

  • SSDEEP

    768:jxI6EJ2q/pOK4XT43j2bBgvrg0UAHdtQJgGlzDpUYse:VQIq/R4XT43aUPjQVqYF

Malware Config

Extracted

Family

mirai

Botnet

MIRAI

Targets

    • Target

      6f3a4a076d6b50ddc1d6caeb07fe23813128ba2bf032f9115d8f55e344ccb4b1.elf

    • Size

      36KB

    • MD5

      8580cdc2029cafca09e91526ab00468d

    • SHA1

      35f33d253414de7d01683107be22ae60b5668041

    • SHA256

      6f3a4a076d6b50ddc1d6caeb07fe23813128ba2bf032f9115d8f55e344ccb4b1

    • SHA512

      be209112a270ce04acd3b46183a861782481d90362c90012cc54c79aa64cdc7d2788225c00d6fce82045c5727776d97b778b46cd50714455c6ec42696202ccfb

    • SSDEEP

      768:jxI6EJ2q/pOK4XT43j2bBgvrg0UAHdtQJgGlzDpUYse:VQIq/R4XT43aUPjQVqYF

    • Mirai

      Mirai is a prevalent Linux malware infecting exposed network devices.

    • Contacts a large (23832) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

    • File and Directory Permissions Modification

      Adversaries may modify file or directory permissions to evade defenses.

MITRE ATT&CK Enterprise v15

Tasks