General

  • Target

    20c6b58e3dc88b240d028f991211a90b47821971a970c5feef7f25c935896ff3.elf

  • Size

    82KB

  • Sample

    241213-cr3dhavqdz

  • MD5

    da72cb23594804e2e4d8a4c14f031905

  • SHA1

    5264576d77a25f2643e419a55d24aaee02edaba2

  • SHA256

    20c6b58e3dc88b240d028f991211a90b47821971a970c5feef7f25c935896ff3

  • SHA512

    52945d3185f4be34eb88e0bda3a92aa1fe0ad36e600e6a9b756917d39d8e4e6aff128cbfb5de2c47bf4cae15227277eec9521b9dc8d313100825246b8557aadd

  • SSDEEP

    1536:iVLymx1KG1kj752dCexuV/8UZlDwfkJ4MYfWv:iVLyIUVFezxu5VD1eK

Malware Config

Extracted

Family

mirai

C2

d.qqzx.cc

Targets

    • Target

      20c6b58e3dc88b240d028f991211a90b47821971a970c5feef7f25c935896ff3.elf

    • Size

      82KB

    • MD5

      da72cb23594804e2e4d8a4c14f031905

    • SHA1

      5264576d77a25f2643e419a55d24aaee02edaba2

    • SHA256

      20c6b58e3dc88b240d028f991211a90b47821971a970c5feef7f25c935896ff3

    • SHA512

      52945d3185f4be34eb88e0bda3a92aa1fe0ad36e600e6a9b756917d39d8e4e6aff128cbfb5de2c47bf4cae15227277eec9521b9dc8d313100825246b8557aadd

    • SSDEEP

      1536:iVLymx1KG1kj752dCexuV/8UZlDwfkJ4MYfWv:iVLyIUVFezxu5VD1eK

    • Contacts a large (36601) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

    • File and Directory Permissions Modification

      Adversaries may modify file or directory permissions to evade defenses.

    • Enumerates running processes

      Discovers information about currently running processes on the system

MITRE ATT&CK Enterprise v15

Tasks