General

  • Target
    test.elf
  • Size 151KB
  • Sample241129-a73cbswrdz
  • SHA256 4fa2699136d4dcaef93531f074cb0444f45a017a28e41c160c49c35bbd79ca8b
  • MD5 SHA1 SHA512 SSDEEP

Malware Config

Extracted

Family
  • mirai

Botnet
  • SORA

Targets

    • Target
      test.elf
    • Size 151KB
    • SHA256 4fa2699136d4dcaef93531f074cb0444f45a017a28e41c160c49c35bbd79ca8b
    • MD5 SHA1 SHA512 SSDEEP
    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    • Enumerates active TCP sockets

      Gets active TCP sockets from /proc virtual filesystem.

    • Enumerates running processes

      Discovers information about currently running processes on the system

MITRE ATT&CK Enterprise v15

Tasks