General

  • Target

    debug.dbg.elf

  • Size

    69KB

  • Sample

    241204-xfr4lswjbx

  • MD5

    c0e59d759977fb1c5d5aab9dbb1e15c2

  • SHA1

    b5bdfc2dfd0530ccfc1cee051a594ca434586290

  • SHA256

    6a5313062646d36ccf6ea17fd6a61d6336288cb5198510480907b6225d339bd0

  • SHA512

    338bd00348509dbff521bbc88c5f65684ab07862c87095c29d35a0fca0f1bb9a94b7c5bc1cc37f6b660f5d18dfc7f29e841f5cc181b6bc37a0db73056a1ff000

  • SSDEEP

    1536:bSKRI7C2wEI5Z5u68+I/UCCPB4+bVUeod1osoqSTxfPoui7N1OF9QmAj:bSKRI7C2wEI5fxCCp4+bVUeod6soqSTK

Malware Config

Extracted

Family

mirai

Botnet

UNSTABLE

C2

server.meal-data.com

ssca.meal-data.com

Targets

    • Target

      debug.dbg.elf

    • Size

      69KB

    • MD5

      c0e59d759977fb1c5d5aab9dbb1e15c2

    • SHA1

      b5bdfc2dfd0530ccfc1cee051a594ca434586290

    • SHA256

      6a5313062646d36ccf6ea17fd6a61d6336288cb5198510480907b6225d339bd0

    • SHA512

      338bd00348509dbff521bbc88c5f65684ab07862c87095c29d35a0fca0f1bb9a94b7c5bc1cc37f6b660f5d18dfc7f29e841f5cc181b6bc37a0db73056a1ff000

    • SSDEEP

      1536:bSKRI7C2wEI5Z5u68+I/UCCPB4+bVUeod1osoqSTxfPoui7N1OF9QmAj:bSKRI7C2wEI5fxCCp4+bVUeod6soqSTK

    Score
    7/10
    • Deletes itself

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    • Writes file to system bin folder

MITRE ATT&CK Enterprise v15

Tasks