General

  • Target

    arm7.elf

  • Size

    147KB

  • Sample

    241216-lcgmxstqg1

  • MD5

    a5a46ab834e2fd4ea2e14dbfde7c0517

  • SHA1

    656009fcd4774af8cc966ae78dc2b03888ffbc0f

  • SHA256

    a9b447db9ccc8d61a3f762d7095e8a88014b20cac85bdc63849ea845d7b74d57

  • SHA512

    d7641058ee1d618e75cd54ab1e81026872e9854d728131e8416edab733917512a88e42428698aa4ebf9159237856e91ac446673160d1b4fb0968fbc7bb3fe900

  • SSDEEP

    3072:eJLce5p0pHdiSEaaHbz4NrA/Jt5IQ1F9kXMk/M/983kY:eJLcH9EaaHbz4NU/JrH9kXMcM/9IkY

Malware Config

Extracted

Family

mirai

C2

230.btc-f2pool.top

Targets

    • Target

      arm7.elf

    • Size

      147KB

    • MD5

      a5a46ab834e2fd4ea2e14dbfde7c0517

    • SHA1

      656009fcd4774af8cc966ae78dc2b03888ffbc0f

    • SHA256

      a9b447db9ccc8d61a3f762d7095e8a88014b20cac85bdc63849ea845d7b74d57

    • SHA512

      d7641058ee1d618e75cd54ab1e81026872e9854d728131e8416edab733917512a88e42428698aa4ebf9159237856e91ac446673160d1b4fb0968fbc7bb3fe900

    • SSDEEP

      3072:eJLce5p0pHdiSEaaHbz4NrA/Jt5IQ1F9kXMk/M/983kY:eJLcH9EaaHbz4NU/JrH9kXMcM/9IkY

    • Contacts a large (36875) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

    • File and Directory Permissions Modification

      Adversaries may modify file or directory permissions to evade defenses.

MITRE ATT&CK Enterprise v15

Tasks