General

  • Target

    051b0f3c60289f30bc8bdda7b4f4b3e1ecbb6fc8292a2fcac93bea59817784b8.elf

  • Size

    39KB

  • Sample

    241111-cjf6astkem

  • MD5

    0cea65104728952f216f71c6c324a389

  • SHA1

    24a289a79587989f8526ed22fc76ceac68bd57b4

  • SHA256

    051b0f3c60289f30bc8bdda7b4f4b3e1ecbb6fc8292a2fcac93bea59817784b8

  • SHA512

    a091dc64d22b254ea3254894405d3eeea2f1dfb7680f7b44e5ec66996d138c3757ec215cfe5c7562cdeedd61ab3d223d8f8c247e5404426d68bee97bedcdbdf1

  • SSDEEP

    768:kUSoFJ8IK6SgLcff+Ir8NTprsREgudCPeMOsHgFgVM7qCHMgKRW4cWRv9sPwa0:tf8IR5L6SsRE7UViKSqCQW4bFuwa0

Malware Config

Extracted

Family

mirai

Botnet

MIRAI

Targets

    • Target

      051b0f3c60289f30bc8bdda7b4f4b3e1ecbb6fc8292a2fcac93bea59817784b8.elf

    • Size

      39KB

    • MD5

      0cea65104728952f216f71c6c324a389

    • SHA1

      24a289a79587989f8526ed22fc76ceac68bd57b4

    • SHA256

      051b0f3c60289f30bc8bdda7b4f4b3e1ecbb6fc8292a2fcac93bea59817784b8

    • SHA512

      a091dc64d22b254ea3254894405d3eeea2f1dfb7680f7b44e5ec66996d138c3757ec215cfe5c7562cdeedd61ab3d223d8f8c247e5404426d68bee97bedcdbdf1

    • SSDEEP

      768:kUSoFJ8IK6SgLcff+Ir8NTprsREgudCPeMOsHgFgVM7qCHMgKRW4cWRv9sPwa0:tf8IR5L6SsRE7UViKSqCQW4bFuwa0

    • Mirai

      Mirai is a prevalent Linux malware infecting exposed network devices.

    • Mirai family

    • Contacts a large (395359) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

    • File and Directory Permissions Modification

      Adversaries may modify file or directory permissions to evade defenses.

MITRE ATT&CK Enterprise v15

Tasks