General

  • Target

    52f5cec403912d29bbfe7daa6b10576f26e9fb7e3aa110e749e60d0b92fff59c.elf

  • Size

    57KB

  • Sample

    241216-cqa8mazrcr

  • MD5

    7793b23aea988f40ac595b0e980877e7

  • SHA1

    a4ef0db72634142b0d9124d5e7ecbd92722194ee

  • SHA256

    52f5cec403912d29bbfe7daa6b10576f26e9fb7e3aa110e749e60d0b92fff59c

  • SHA512

    27833103d1347e3b4c66036427fe99a6c122a628bc94312e3f4f33de238c321deb73a6541b6170394ac5a77aa1aaeae78a622f69fadc49af2f8e2c632695e29b

  • SSDEEP

    1536:KZnx4HVynObXFUOmVz1NzBQk8SRGJSlpa9p9l5vicj6v/pW:W4HV4mezbOknRGJSlpgBj6HpW

Malware Config

Extracted

Family

mirai

Botnet

BOTNET

Targets

    • Target

      52f5cec403912d29bbfe7daa6b10576f26e9fb7e3aa110e749e60d0b92fff59c.elf

    • Size

      57KB

    • MD5

      7793b23aea988f40ac595b0e980877e7

    • SHA1

      a4ef0db72634142b0d9124d5e7ecbd92722194ee

    • SHA256

      52f5cec403912d29bbfe7daa6b10576f26e9fb7e3aa110e749e60d0b92fff59c

    • SHA512

      27833103d1347e3b4c66036427fe99a6c122a628bc94312e3f4f33de238c321deb73a6541b6170394ac5a77aa1aaeae78a622f69fadc49af2f8e2c632695e29b

    • SSDEEP

      1536:KZnx4HVynObXFUOmVz1NzBQk8SRGJSlpa9p9l5vicj6v/pW:W4HV4mezbOknRGJSlpgBj6HpW

    • Contacts a large (673308) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

MITRE ATT&CK Enterprise v15

Tasks