General

  • Target

    a0eb03bc59b6c0de5fc3066a82ca9d7a7798df11019e41bd922693633eb7b376.elf

  • Size

    39KB

  • Sample

    241111-daaslavjcj

  • MD5

    e592dbddae01d8ee2e8cacac1a975c07

  • SHA1

    420bbde9b2a7b9dc9c6aaea8498e5cec6afdfcdf

  • SHA256

    a0eb03bc59b6c0de5fc3066a82ca9d7a7798df11019e41bd922693633eb7b376

  • SHA512

    a907347ae1db7b78faadb1dc4cd6cfaebb1ff6115315311f11653517ed357582dae4a99fc60b73a6692a2f6a39589e5f2826adafe9566a3e74f62eb18cb0c4ec

  • SSDEEP

    768:U8i43jVHn46mpkyfraGob0lcsU6SOjkdGsqDV8S9QSIJgGlzDpUYswK:Un43R4LkyDaGA9B6vtF9/IVqYXK

Malware Config

Extracted

Family

mirai

Botnet

MIRAI

Targets

    • Target

      a0eb03bc59b6c0de5fc3066a82ca9d7a7798df11019e41bd922693633eb7b376.elf

    • Size

      39KB

    • MD5

      e592dbddae01d8ee2e8cacac1a975c07

    • SHA1

      420bbde9b2a7b9dc9c6aaea8498e5cec6afdfcdf

    • SHA256

      a0eb03bc59b6c0de5fc3066a82ca9d7a7798df11019e41bd922693633eb7b376

    • SHA512

      a907347ae1db7b78faadb1dc4cd6cfaebb1ff6115315311f11653517ed357582dae4a99fc60b73a6692a2f6a39589e5f2826adafe9566a3e74f62eb18cb0c4ec

    • SSDEEP

      768:U8i43jVHn46mpkyfraGob0lcsU6SOjkdGsqDV8S9QSIJgGlzDpUYswK:Un43R4LkyDaGA9B6vtF9/IVqYXK

    • Mirai

      Mirai is a prevalent Linux malware infecting exposed network devices.

    • Mirai family

    • Contacts a large (396828) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

    • File and Directory Permissions Modification

      Adversaries may modify file or directory permissions to evade defenses.

MITRE ATT&CK Enterprise v15

Tasks