General

  • Target

    botnet.mips.elf

  • Size

    36KB

  • Sample

    241113-3st2ma1jc1

  • MD5

    76d4fa4df4054489a5f29e5362370ea8

  • SHA1

    dfc9b7018aacaaea721b17b7fd6298a071401356

  • SHA256

    5c019c6f599273cc75f158d4573c63d751576609a6ce611ced2a8c6c650a0532

  • SHA512

    a8b4a4c486d6a45945d68c1946a7f210a09f95f3b900766373a92bdb4096bf4055ab8bd68746d9f7b19f65d2edb24e7c858f7365d716e59038130bc444dcb8ea

  • SSDEEP

    768:VFwoLdBhILNp1DEsYUEnrveLcJHV0s2CIJSNgkHxQjetuJgGlzDpUYsfp:f/dQDTNCzeOg8SjesVqYO

Malware Config

Extracted

Family

mirai

Botnet

MIRAI

Targets

    • Target

      botnet.mips.elf

    • Size

      36KB

    • MD5

      76d4fa4df4054489a5f29e5362370ea8

    • SHA1

      dfc9b7018aacaaea721b17b7fd6298a071401356

    • SHA256

      5c019c6f599273cc75f158d4573c63d751576609a6ce611ced2a8c6c650a0532

    • SHA512

      a8b4a4c486d6a45945d68c1946a7f210a09f95f3b900766373a92bdb4096bf4055ab8bd68746d9f7b19f65d2edb24e7c858f7365d716e59038130bc444dcb8ea

    • SSDEEP

      768:VFwoLdBhILNp1DEsYUEnrveLcJHV0s2CIJSNgkHxQjetuJgGlzDpUYsfp:f/dQDTNCzeOg8SjesVqYO

    • Mirai

      Mirai is a prevalent Linux malware infecting exposed network devices.

    • Mirai family

    • Contacts a large (23510) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

    • File and Directory Permissions Modification

      Adversaries may modify file or directory permissions to evade defenses.

MITRE ATT&CK Enterprise v15

Tasks