General

  • Target

    zmap.mips.elf

  • Size

    94KB

  • Sample

    241102-rpnjwswmcx

  • MD5

    192b6eb8dcf1ad172064c832fbb47b92

  • SHA1

    a2af8812f96d0748f3a119a4419ff65dcffb179c

  • SHA256

    a97f5317845c7053e64d0d8d5e076532de7a2c98189eb7304b8e0e742e61e93d

  • SHA512

    7ad2efc28832cf1312c00bccf6866669938b0f4787999b7112f750377aa5582b8c508bedba29f482dadceb6a1c3868ce87220cdded44399a1cd325ab9bfd7e9a

  • SSDEEP

    1536:mF4tsbv54o+3bPhXhWxZJlwYdPAL+fyecpeo6XELty:mF4tsr54o+rPhkxlwYdoL+fyecIXELY

Malware Config

Extracted

Family

mirai

Botnet

UNSTABLE

Targets

    • Target

      zmap.mips.elf

    • Size

      94KB

    • MD5

      192b6eb8dcf1ad172064c832fbb47b92

    • SHA1

      a2af8812f96d0748f3a119a4419ff65dcffb179c

    • SHA256

      a97f5317845c7053e64d0d8d5e076532de7a2c98189eb7304b8e0e742e61e93d

    • SHA512

      7ad2efc28832cf1312c00bccf6866669938b0f4787999b7112f750377aa5582b8c508bedba29f482dadceb6a1c3868ce87220cdded44399a1cd325ab9bfd7e9a

    • SSDEEP

      1536:mF4tsbv54o+3bPhXhWxZJlwYdPAL+fyecpeo6XELty:mF4tsr54o+rPhkxlwYdoL+fyecIXELY

    • Deletes itself

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    • Writes file to system bin folder

MITRE ATT&CK Enterprise v15

Tasks