Resubmissions

18/07/2026, 13:50

260718-q5plfsgs813

11/11/2024, 10:38

241111-mps26a1qdm10

General

  • Target
    35d40279752f0fe5f426f9d20ca416051361ab39c06bff480c0341816e115815.sh
  • Size 1KB
  • Sample241111-mps26a1qdm
  • SHA256 35d40279752f0fe5f426f9d20ca416051361ab39c06bff480c0341816e115815
  • MD5 SHA1 SHA512

Malware Config

Extracted

Family
  • mirai

C2
  • omg.rekugg.pro

Extracted

Family
  • mirai

C2
  • omg.rekugg.pro

Extracted

Family
  • mirai

C2
  • omg.rekugg.pro

Targets

    • Target
      35d40279752f0fe5f426f9d20ca416051361ab39c06bff480c0341816e115815.sh
    • Size 1KB
    • SHA256 35d40279752f0fe5f426f9d20ca416051361ab39c06bff480c0341816e115815
    • MD5 SHA1 SHA512
    • Mirai

      Mirai is a prevalent Linux malware infecting exposed network devices.

    • Mirai family

    • File and Directory Permissions Modification

      Adversaries may modify file or directory permissions to evade defenses.

    • Deletes itself

    • Executes dropped EXE

    • Traces itself

      Traces itself to prevent debugging attempts

    • Enumerates active TCP sockets

      Gets active TCP sockets from /proc virtual filesystem.

MITRE ATT&CK Enterprise v15

Tasks