General

  • Target

    414cfab9421debf15fbb84186304c7f8c90e74e23ee7a6dcd4f48be2892f7d12.elf

  • Size

    33KB

  • Sample

    241111-cr6qxs1bmg

  • MD5

    435c5797f6ceec4ca426271ad2a4e151

  • SHA1

    03cbf06731f8a49f668027a9499210953a6482c0

  • SHA256

    414cfab9421debf15fbb84186304c7f8c90e74e23ee7a6dcd4f48be2892f7d12

  • SHA512

    50562f3d8c211220966beefb8af9cff33dfa2d565dcbb24a7abab2fd3b085cd2805efa2468deb0d3795a1878cbcf1ab0c986bfaa7b22f472eaf5cad707ee51cb

  • SSDEEP

    768:pVeJDGugClAp31el9ykTytcZqWfPJog+zfTf5SNS3UX:aDG53QjdScZqWHwf50

Malware Config

Extracted

Family

mirai

Botnet

MIRAI

Targets

    • Target

      414cfab9421debf15fbb84186304c7f8c90e74e23ee7a6dcd4f48be2892f7d12.elf

    • Size

      33KB

    • MD5

      435c5797f6ceec4ca426271ad2a4e151

    • SHA1

      03cbf06731f8a49f668027a9499210953a6482c0

    • SHA256

      414cfab9421debf15fbb84186304c7f8c90e74e23ee7a6dcd4f48be2892f7d12

    • SHA512

      50562f3d8c211220966beefb8af9cff33dfa2d565dcbb24a7abab2fd3b085cd2805efa2468deb0d3795a1878cbcf1ab0c986bfaa7b22f472eaf5cad707ee51cb

    • SSDEEP

      768:pVeJDGugClAp31el9ykTytcZqWfPJog+zfTf5SNS3UX:aDG53QjdScZqWHwf50

    • Mirai

      Mirai is a prevalent Linux malware infecting exposed network devices.

    • Mirai family

    • Contacts a large (23511) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

    • File and Directory Permissions Modification

      Adversaries may modify file or directory permissions to evade defenses.

MITRE ATT&CK Enterprise v15

Tasks