Overview

overview

10

Static

static

10

7a8ed4a1f7...69.elf

ubuntu-24.04-amd64

9

Sharing

Copy URL Twitter E-mail

General

  • Target
    7a8ed4a1f76797d3b9b6b5f738a0b6dab41bf4fa7c0abfd49b8714f898cc8669.elf
  • Size 60KB
  • Sample241105-d24jzstdkf
  • SHA256 7a8ed4a1f76797d3b9b6b5f738a0b6dab41bf4fa7c0abfd49b8714f898cc8669
  • MD5 SHA1 SHA512 SSDEEP
Score
10/10
miraitsunagudiscoverylinuxrootkit

Malware Config

Extracted

Family

  • mirai

Botnet

  • TSUNAGU

C2

  • aiddoscnc.aisysmddos.com

  • aiddoscnc2.aisysmddos.com

Targets

    • Target
      7a8ed4a1f76797d3b9b6b5f738a0b6dab41bf4fa7c0abfd49b8714f898cc8669.elf
    • Size 60KB
    • SHA256 7a8ed4a1f76797d3b9b6b5f738a0b6dab41bf4fa7c0abfd49b8714f898cc8669
    • MD5 SHA1 SHA512 SSDEEP
    Score
    9/10
    discoveryrootkit

    • Contacts a large (76773) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

      discovery

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

      discovery

    • Loads a kernel module

      Loads a Linux kernel module, potentially to achieve persistence

      rootkit
    behavioral1

MITRE ATT&CK Enterprise v15

Tasks