General

  • Target

    716c82c534a179738785e0917dde43f24d1ca1fb8a0a1826b651126aa46d1e26.elf

  • Size

    261KB

  • Sample

    241211-c9cksssmhz

  • MD5

    ad2c77b76858b10ea25fb39d61d857e5

  • SHA1

    46cbc2ca9c592506e5c8791bf42aff8164ade4b8

  • SHA256

    716c82c534a179738785e0917dde43f24d1ca1fb8a0a1826b651126aa46d1e26

  • SHA512

    d054467396d1a0a447398f58f9567cb5966355664ee4be9d39b7a94546e259b38927b86ea510ccb16a787617e7b219047fac38f00e7920db80f6c2c5d91c98f3

  • SSDEEP

    6144:7uF6+0bzq3bWc+a6rHOQUldy+PhwRMe20pLM/RJmv2RZ6TUPP:780vQWc+a6rHOQUGyypg/3mvmZ6TgP

Malware Config

Extracted

Family

mirai

Botnet

MIRAI

C2

something.catchat.us

Targets

    • Target

      716c82c534a179738785e0917dde43f24d1ca1fb8a0a1826b651126aa46d1e26.elf

    • Size

      261KB

    • MD5

      ad2c77b76858b10ea25fb39d61d857e5

    • SHA1

      46cbc2ca9c592506e5c8791bf42aff8164ade4b8

    • SHA256

      716c82c534a179738785e0917dde43f24d1ca1fb8a0a1826b651126aa46d1e26

    • SHA512

      d054467396d1a0a447398f58f9567cb5966355664ee4be9d39b7a94546e259b38927b86ea510ccb16a787617e7b219047fac38f00e7920db80f6c2c5d91c98f3

    • SSDEEP

      6144:7uF6+0bzq3bWc+a6rHOQUldy+PhwRMe20pLM/RJmv2RZ6TUPP:780vQWc+a6rHOQUGyypg/3mvmZ6TgP

    • Contacts a large (130687) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

    • File and Directory Permissions Modification

      Adversaries may modify file or directory permissions to evade defenses.

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

MITRE ATT&CK Enterprise v15

Tasks