General

  • Target

    zmap.x86.elf

  • Size

    61KB

  • Sample

    241216-spk97stldy

  • MD5

    d1f752879420a6d45d76f130281392d6

  • SHA1

    46a92c0efae33b8a826dc48daa3dbf3d30be4a15

  • SHA256

    4fc42ee2d91d577e0bcc49c27d5f3936584ad49c27b5032baa57a6c6e53b4914

  • SHA512

    91e7beb1157bf75f4e73459eb2ab003005aa591848698451ee6dc79764570bf2d8a253c25dda6346b657367844048cd21be38b6485d169e373e8455b2d586225

  • SSDEEP

    1536:1BGfyT5OGMMt4cesUTeFIv5TzHhWKg80CIjOepn20:1caT5OGMMtmaATzBWKp07Kanp

Malware Config

Extracted

Family

mirai

Botnet

UNSTABLE

C2

servers.vlrt-gap.com

Targets

    • Target

      zmap.x86.elf

    • Size

      61KB

    • MD5

      d1f752879420a6d45d76f130281392d6

    • SHA1

      46a92c0efae33b8a826dc48daa3dbf3d30be4a15

    • SHA256

      4fc42ee2d91d577e0bcc49c27d5f3936584ad49c27b5032baa57a6c6e53b4914

    • SHA512

      91e7beb1157bf75f4e73459eb2ab003005aa591848698451ee6dc79764570bf2d8a253c25dda6346b657367844048cd21be38b6485d169e373e8455b2d586225

    • SSDEEP

      1536:1BGfyT5OGMMt4cesUTeFIv5TzHhWKg80CIjOepn20:1caT5OGMMtmaATzBWKp07Kanp

    Score
    7/10
    • Deletes itself

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    • Writes file to system bin folder

MITRE ATT&CK Enterprise v15

Tasks