General

  • Target

    zmap.mips.elf

  • Size

    94KB

  • Sample

    241101-q9greasqap

  • MD5

    a55e5e6c26c699be309b9dcb6042479a

  • SHA1

    be64cda11e580108c2eba01e92daaddeaa873fcf

  • SHA256

    2b584f83586cf4740b30701bf62d389a5244dd140478611230f1c4699eda6974

  • SHA512

    aa9bfc765e9bc3120348f53f9858c5f5c6f0cb2b14e417085066251fe86bde55041f0eb406f069a5bbb69c93562915b80c420a5fb3e30aaac774787bbe4e1a94

  • SSDEEP

    1536:mF4tsbv54o+3bPhXhWxZJnaYdRA6+fyecpeo6XHLty:mF4tsr54o+rPhkxnaYda6+fyecIXHLY

Malware Config

Extracted

Family

mirai

Botnet

UNSTABLE

Targets

    • Target

      zmap.mips.elf

    • Size

      94KB

    • MD5

      a55e5e6c26c699be309b9dcb6042479a

    • SHA1

      be64cda11e580108c2eba01e92daaddeaa873fcf

    • SHA256

      2b584f83586cf4740b30701bf62d389a5244dd140478611230f1c4699eda6974

    • SHA512

      aa9bfc765e9bc3120348f53f9858c5f5c6f0cb2b14e417085066251fe86bde55041f0eb406f069a5bbb69c93562915b80c420a5fb3e30aaac774787bbe4e1a94

    • SSDEEP

      1536:mF4tsbv54o+3bPhXhWxZJnaYdRA6+fyecpeo6XHLty:mF4tsr54o+rPhkxnaYda6+fyecIXHLY

    • Deletes itself

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    • Writes file to system bin folder

MITRE ATT&CK Enterprise v15

Tasks