General

  • Target

    mips.elf

  • Size

    87KB

  • Sample

    241203-y93ymsyjgj

  • MD5

    ef8daf11e4d7f6e5ceb5231e5333b9a7

  • SHA1

    3cb74d506ffaca5a3d2b865a41ba8c4a1943ebda

  • SHA256

    3010da171a6907ee997460ba49c59b50285b1a9e7acca93759d51f81bf6ff01f

  • SHA512

    6091a8a7f6c6f457cf0328e0d3a160eb2f867f6674598bc3afe682928f1e82e81bb307e771331feb808c465bd349690cd013e4ae8a0a8246b81354665c60cf6b

  • SSDEEP

    1536:sC5FAh5hytl3jWNU8mr6RdmZozXKzVuMFhFSwACVElNNEEH4uIj:xrAh2tl3jQU8mrImZozXGdACVElN6EYD

Malware Config

Extracted

Family

mirai

Botnet

UNSTABLE

Targets

    • Target

      mips.elf

    • Size

      87KB

    • MD5

      ef8daf11e4d7f6e5ceb5231e5333b9a7

    • SHA1

      3cb74d506ffaca5a3d2b865a41ba8c4a1943ebda

    • SHA256

      3010da171a6907ee997460ba49c59b50285b1a9e7acca93759d51f81bf6ff01f

    • SHA512

      6091a8a7f6c6f457cf0328e0d3a160eb2f867f6674598bc3afe682928f1e82e81bb307e771331feb808c465bd349690cd013e4ae8a0a8246b81354665c60cf6b

    • SSDEEP

      1536:sC5FAh5hytl3jWNU8mr6RdmZozXKzVuMFhFSwACVElNNEEH4uIj:xrAh2tl3jQU8mrImZozXGdACVElN6EYD

    • Contacts a large (141765) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    • Writes file to system bin folder

MITRE ATT&CK Enterprise v15

Tasks