General

  • Target

    home.arm7.elf

  • Size

    62KB

  • Sample

    241207-kr54ds1kdj

  • MD5

    f2c74dd669c54022782a4c6f90136c4c

  • SHA1

    f0512b363e4ba7d4a3c6eb9459445093ee3ddbc6

  • SHA256

    c3e8d371ecdcb75339c6c41001031647167ff10bc36ff41f5d6e1c65b436277a

  • SHA512

    b4f2273ef6f848f7accc5f4424e5ba037f1051d9429bb05d1bc14d8bb916ea9d9ef1b86ffeb1d5a77e495e5287502030559b56fa9d4e7ae567a1310a2128985c

  • SSDEEP

    1536:YlZo7WIxEiFvPEEBFQfBtCCTYEQ1RxemjFjSLEnRbD+aQrt6:R7lxUM4BtYEQPx7j8LEnRm1Y

Malware Config

Extracted

Family

mirai

Botnet

KURA

C2

huyhoang.ddns.net

botnet.nsohunter.com

Targets

    • Target

      home.arm7.elf

    • Size

      62KB

    • MD5

      f2c74dd669c54022782a4c6f90136c4c

    • SHA1

      f0512b363e4ba7d4a3c6eb9459445093ee3ddbc6

    • SHA256

      c3e8d371ecdcb75339c6c41001031647167ff10bc36ff41f5d6e1c65b436277a

    • SHA512

      b4f2273ef6f848f7accc5f4424e5ba037f1051d9429bb05d1bc14d8bb916ea9d9ef1b86ffeb1d5a77e495e5287502030559b56fa9d4e7ae567a1310a2128985c

    • SSDEEP

      1536:YlZo7WIxEiFvPEEBFQfBtCCTYEQ1RxemjFjSLEnRbD+aQrt6:R7lxUM4BtYEQPx7j8LEnRm1Y

    • Mirai

      Mirai is a prevalent Linux malware infecting exposed network devices.

    • Mirai family

    • Contacts a large (279737) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

MITRE ATT&CK Enterprise v15

Tasks