General

  • Target

    feelme420.sh

  • Size

    3KB

  • Sample

    241219-h1shjsvmgk

  • MD5

    22e9d65b991f00de3a52071664dc52f9

  • SHA1

    2b6dd972572c4c72ecf43bb7b66eebe776cd0360

  • SHA256

    7c31b6f7e29de978c261d41059788662d9d53faf08be61330e611eedcd46d33b

  • SHA512

    eefb50d98fc847673e4c38177789e26ee89ec7f027ec5ec92a842470638a84300f378cf10120afab26fe5a87de34c6616f33fc389be816b4763f0fea0eff18cb

Malware Config

Extracted

Family

mirai

C2

chernobyl.stressing.world

Extracted

Family

mirai

C2

chernobyl.stressing.world

Targets

    • Target

      feelme420.sh

    • Size

      3KB

    • MD5

      22e9d65b991f00de3a52071664dc52f9

    • SHA1

      2b6dd972572c4c72ecf43bb7b66eebe776cd0360

    • SHA256

      7c31b6f7e29de978c261d41059788662d9d53faf08be61330e611eedcd46d33b

    • SHA512

      eefb50d98fc847673e4c38177789e26ee89ec7f027ec5ec92a842470638a84300f378cf10120afab26fe5a87de34c6616f33fc389be816b4763f0fea0eff18cb

    • Mirai

      Mirai is a prevalent Linux malware infecting exposed network devices.

    • Mirai family

    • Contacts a large (12800) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

    • File and Directory Permissions Modification

      Adversaries may modify file or directory permissions to evade defenses.

    • Executes dropped EXE

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

    • Enumerates active TCP sockets

      Gets active TCP sockets from /proc virtual filesystem.

    • Enumerates running processes

      Discovers information about currently running processes on the system

    • Writes file to system bin folder

    • Reads process memory

      Read the memory of a process through the /proc virtual filesystem. This can be used to steal credentials.

MITRE ATT&CK Enterprise v15

Tasks