General

  • Target

    mips.elf

  • Size

    82KB

  • Sample

    241216-ldqbfstrgs

  • MD5

    c8f3cfd96eb9c71ba7beb71448b96df7

  • SHA1

    f594b13acca486721f3b7a86967eece5607ea533

  • SHA256

    c4a55a33efc00d141848f686ce70c03798b1375998a6c414d955784e76539583

  • SHA512

    fd82d9b855e675890708290b14b40826eeab145e571e9a859f97c88266e87a96dee879544814cb1947b6aae8b5c13229141f79a0cf3359b6ba528fa4ecdb967a

  • SSDEEP

    768:2ty6IP7M/kq0INRhfuN2Eo9tl/de2YIwHKRH0I84EH6UTjU7ZDYovZ73x/nL8y86:Rakdn2Eo3ePu5GTjURYo99Be037WWv

Malware Config

Extracted

Family

mirai

C2

230.btc-f2pool.top

Targets

    • Target

      mips.elf

    • Size

      82KB

    • MD5

      c8f3cfd96eb9c71ba7beb71448b96df7

    • SHA1

      f594b13acca486721f3b7a86967eece5607ea533

    • SHA256

      c4a55a33efc00d141848f686ce70c03798b1375998a6c414d955784e76539583

    • SHA512

      fd82d9b855e675890708290b14b40826eeab145e571e9a859f97c88266e87a96dee879544814cb1947b6aae8b5c13229141f79a0cf3359b6ba528fa4ecdb967a

    • SSDEEP

      768:2ty6IP7M/kq0INRhfuN2Eo9tl/de2YIwHKRH0I84EH6UTjU7ZDYovZ73x/nL8y86:Rakdn2Eo3ePu5GTjURYo99Be037WWv

    • Contacts a large (36853) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

    • File and Directory Permissions Modification

      Adversaries may modify file or directory permissions to evade defenses.

MITRE ATT&CK Enterprise v15

Tasks