General

  • Target

    011c4d82c6f391669c979bb51cabe5815e14f370e96e4492d298ad16f510b73d.elf

  • Size

    66KB

  • Sample

    241204-cfpcha1ncq

  • MD5

    88660446811d50c52341472f9b03d870

  • SHA1

    bc8c0a5be47d1538a1504aded3f9fdffaabe3b6f

  • SHA256

    011c4d82c6f391669c979bb51cabe5815e14f370e96e4492d298ad16f510b73d

  • SHA512

    15a1bc29f9e2f6c97b498edc751d13720ea7b643f48e7745fa3b10194942294d04556e6a963b3075c6c402c11aead80bf564696f71180a69d10c629055da7cac

  • SSDEEP

    1536:AQqMYLd31JuGGCao6GRnBkmnz8o16Qj7AT4vpN3:VqMYrJdvaopRnuE16QjI4v

Malware Config

Extracted

Family

mirai

Botnet

UNSTABLE

C2

scamanje.stresserit.pro

Targets

    • Target

      011c4d82c6f391669c979bb51cabe5815e14f370e96e4492d298ad16f510b73d.elf

    • Size

      66KB

    • MD5

      88660446811d50c52341472f9b03d870

    • SHA1

      bc8c0a5be47d1538a1504aded3f9fdffaabe3b6f

    • SHA256

      011c4d82c6f391669c979bb51cabe5815e14f370e96e4492d298ad16f510b73d

    • SHA512

      15a1bc29f9e2f6c97b498edc751d13720ea7b643f48e7745fa3b10194942294d04556e6a963b3075c6c402c11aead80bf564696f71180a69d10c629055da7cac

    • SSDEEP

      1536:AQqMYLd31JuGGCao6GRnBkmnz8o16Qj7AT4vpN3:VqMYrJdvaopRnuE16QjI4v

    • Contacts a large (148798) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    • Writes file to system bin folder

MITRE ATT&CK Enterprise v15

Tasks