mirai | fb76d3b27cf799ce57466693ae75dd2b0d0fc627d2dff55f518c6910f86d9bce | Triage

Sharing

General

Target

fb76d3b27cf799ce57466693ae75dd2b0d0fc627d2dff55f518c6910f86d9bce.elf
Size

104KB
Sample

241214-rjrpcswncj
MD5

666fd8f36ee363d671814585e74e3d85
SHA1

9868a73adf68fcaad60967b412c0a7a2b8169403
SHA256

fb76d3b27cf799ce57466693ae75dd2b0d0fc627d2dff55f518c6910f86d9bce
SHA512

fd6dac2beffb32a119384e76a895ea0f1783e67dd0f42dac7b91daff4169b2e3c3bdbdaa29ff74801407d77006dd279ec16398c666260e964928a991e6bf155b
SSDEEP

1536:tuYk5qdBvHRLloCPVL1qgPHsYNDFsTbIxNqOCpXM:tuY82BvHNlo+nFpFMbGIBu

Score

10^/10

mirai discovery

Malware Config

Targets

- Target
  
  fb76d3b27cf799ce57466693ae75dd2b0d0fc627d2dff55f518c6910f86d9bce.elf
- Size
  
  104KB
- MD5
  
  666fd8f36ee363d671814585e74e3d85
- SHA1
  
  9868a73adf68fcaad60967b412c0a7a2b8169403
- SHA256
  
  fb76d3b27cf799ce57466693ae75dd2b0d0fc627d2dff55f518c6910f86d9bce
- SHA512
  
  fd6dac2beffb32a119384e76a895ea0f1783e67dd0f42dac7b91daff4169b2e3c3bdbdaa29ff74801407d77006dd279ec16398c666260e964928a991e6bf155b
- SSDEEP
  
  1536:tuYk5qdBvHRLloCPVL1qgPHsYNDFsTbIxNqOCpXM:tuY82BvHNlo+nFpFMbGIBu
Score

7^/10

discovery
- Deletes itself
- Renames itself
- Enumerates active TCP sockets
  Gets active TCP sockets from /proc virtual filesystem.
  discovery
behavioral1

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Network Configuration Discovery

Internet Connection Discovery

System Network Connections Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1