mirai | 97442f9e46708e19561bfa4efedaca9a01805f6533bdaaaab37a5c972b1440f5 | Triage

Sharing

General

Target

da6f578c5576be51b1f6c05a1031dd29_JaffaCakes118
Size

42KB
Sample

241209-tk67jsyjbr
MD5

da6f578c5576be51b1f6c05a1031dd29
SHA1

df28fcb90eb233f9e3bc9ea2e93304dbc6640ea5
SHA256

97442f9e46708e19561bfa4efedaca9a01805f6533bdaaaab37a5c972b1440f5
SHA512

282e357583fccefe25a8d1122146e197df3a3000144360b7396ae13a7684205b8629dcf3737cc64638dd9354e1178608489bc7d7c2b325ca00f9892526c8b820
SSDEEP

768:IyswYQCKbcRZrjighw+DwvapBRt8W5Q87Sv6I2yyUC9O:INRZr+kDSapBRXj7Sv/JCY

Score

10^/10

mirai botnet discovery

Malware Config

Targets

- Target
  
  da6f578c5576be51b1f6c05a1031dd29_JaffaCakes118
- Size
  
  42KB
- MD5
  
  da6f578c5576be51b1f6c05a1031dd29
- SHA1
  
  df28fcb90eb233f9e3bc9ea2e93304dbc6640ea5
- SHA256
  
  97442f9e46708e19561bfa4efedaca9a01805f6533bdaaaab37a5c972b1440f5
- SHA512
  
  282e357583fccefe25a8d1122146e197df3a3000144360b7396ae13a7684205b8629dcf3737cc64638dd9354e1178608489bc7d7c2b325ca00f9892526c8b820
- SSDEEP
  
  768:IyswYQCKbcRZrjighw+DwvapBRt8W5Q87Sv6I2yyUC9O:INRZr+kDSapBRXj7Sv/JCY
Score

10^/10

mirai botnet discovery
- Mirai
  Mirai is a prevalent Linux malware infecting exposed network devices.
  botnet mirai
- Mirai family
  mirai
- Enumerates active TCP sockets
  Gets active TCP sockets from /proc virtual filesystem.
  discovery
behavioral1

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Network Configuration Discovery

Internet Connection Discovery

System Network Connections Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

miraibotnetdiscovery