General

  • Target

    ed59aa1939c0eef89211cdf756076ed7a58fa6977d219f0b244c877936303546.elf

  • Size

    36KB

  • Sample

    241111-dpg58avmej

  • MD5

    4c51017585663b65da1fd0af12210777

  • SHA1

    d060a5edbf65fca1631aa48bfd1bd7c2df384f5b

  • SHA256

    ed59aa1939c0eef89211cdf756076ed7a58fa6977d219f0b244c877936303546

  • SHA512

    3fe47b9e6e637f846fa43e2a301bdbc44c3b4731bdf6fb05f007aab7329635a86ae4eff1d85e5aa5ab15c5249f20c58690a1e9373e913b73fbcf9f1ca0da5e34

  • SSDEEP

    768:KFwoLdBhILNp1DWceB1vkKjHDBwkJKSmTjJgGlzDpUYsfW:o/dQDWljnBwSkVqYx

Malware Config

Extracted

Family

mirai

Botnet

MIRAI

Targets

    • Target

      ed59aa1939c0eef89211cdf756076ed7a58fa6977d219f0b244c877936303546.elf

    • Size

      36KB

    • MD5

      4c51017585663b65da1fd0af12210777

    • SHA1

      d060a5edbf65fca1631aa48bfd1bd7c2df384f5b

    • SHA256

      ed59aa1939c0eef89211cdf756076ed7a58fa6977d219f0b244c877936303546

    • SHA512

      3fe47b9e6e637f846fa43e2a301bdbc44c3b4731bdf6fb05f007aab7329635a86ae4eff1d85e5aa5ab15c5249f20c58690a1e9373e913b73fbcf9f1ca0da5e34

    • SSDEEP

      768:KFwoLdBhILNp1DWceB1vkKjHDBwkJKSmTjJgGlzDpUYsfW:o/dQDWljnBwSkVqYx

    • Mirai

      Mirai is a prevalent Linux malware infecting exposed network devices.

    • Mirai family

    • Contacts a large (23992) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

    • File and Directory Permissions Modification

      Adversaries may modify file or directory permissions to evade defenses.

MITRE ATT&CK Enterprise v15

Tasks