mirai | d3225b7b294776a0bf960886e082f00ce32a06985b30fbb94d288e66074f305d | Triage

Sharing

General

Target

d3225b7b294776a0bf960886e082f00ce32a06985b30fbb94d288e66074f305d.elf
Size

103KB
Sample

241214-qvqe1avqcj
MD5

82386baa236b1d0ea72500f4c102a8c7
SHA1

2fa53314548e2aa8b9ea981876ed0cf69324feeb
SHA256

d3225b7b294776a0bf960886e082f00ce32a06985b30fbb94d288e66074f305d
SHA512

031fa96b553ff58da2d22ef86ada9d93a95f711357ec22bc996fbc05c2ac560a3d4cd8936258ba1f4390e511128e17046beb70d7f55d07dc97cf01f251a5d909
SSDEEP

1536:pjDM3NJj8kZb3fkGaO5EzBYymCrifXvXbM:pwJj8o+OSBBsfXI

Score

10^/10

mirai discovery

Malware Config

Targets

- Target
  
  d3225b7b294776a0bf960886e082f00ce32a06985b30fbb94d288e66074f305d.elf
- Size
  
  103KB
- MD5
  
  82386baa236b1d0ea72500f4c102a8c7
- SHA1
  
  2fa53314548e2aa8b9ea981876ed0cf69324feeb
- SHA256
  
  d3225b7b294776a0bf960886e082f00ce32a06985b30fbb94d288e66074f305d
- SHA512
  
  031fa96b553ff58da2d22ef86ada9d93a95f711357ec22bc996fbc05c2ac560a3d4cd8936258ba1f4390e511128e17046beb70d7f55d07dc97cf01f251a5d909
- SSDEEP
  
  1536:pjDM3NJj8kZb3fkGaO5EzBYymCrifXvXbM:pwJj8o+OSBBsfXI
Score

7^/10

discovery
- Deletes itself
- Renames itself
- Enumerates active TCP sockets
  Gets active TCP sockets from /proc virtual filesystem.
  discovery
behavioral1

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Network Configuration Discovery

Internet Connection Discovery

System Network Connections Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1