Analysis

  • max time kernel
    2s
  • max time network
    20s
  • platform
    debian-12_mipsel
  • resource
    debian12-mipsel-20240221-en
  • resource tags

    arch:mipselimage:debian12-mipsel-20240221-enkernel:6.1.0-17-4kc-maltalocale:en-usos:debian-12-mipselsystem
  • submitted
    08/12/2024, 02:52

General

  • Target

    f58254d91ecea6d3c3b003f06e864dcc23807c3ed801c9e81760898eb8f6c8a9.elf

  • Size

    40KB

  • MD5

    5afc6fe3191f3090d2af44aa5944d597

  • SHA1

    b272f9336db788aa023587da9cb0f0c94d616f13

  • SHA256

    f58254d91ecea6d3c3b003f06e864dcc23807c3ed801c9e81760898eb8f6c8a9

  • SHA512

    f563c80ecd562d7675dddcc21f824707d7ffa6917073254a9e19a9111e71b9102823e88e1c2e50046094b727026e5772230a0d3bb1adee97d00f1de2d87d9018

  • SSDEEP

    768:WekGwMu85y/MC4jAlsGYBre2BbQScEn6AZd8MqydVmoxdxNdl9BqzQ96WB:W9Gw/3GAlsGculEdldVm+dp1O0

Score
10/10

Malware Config

Extracted

Family

mirai

Botnet

KURA

C2

huyhoang.ddns.net

botnet.nsohunter.com

Signatures

  • Mirai

    Mirai is a prevalent Linux malware infecting exposed network devices.

  • Mirai family

Processes

  • /tmp/f58254d91ecea6d3c3b003f06e864dcc23807c3ed801c9e81760898eb8f6c8a9.elf
    /tmp/f58254d91ecea6d3c3b003f06e864dcc23807c3ed801c9e81760898eb8f6c8a9.elf
    1⤵
      PID:745

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads