General

  • Target

    mpsl.elf

  • Size

    95KB

  • Sample

    241220-sy7jsszjbl

  • MD5

    2b671c0e7ee1068632e6d2ff298c7486

  • SHA1

    dc3d668edbe45dedc44460ec4878c0025063de01

  • SHA256

    b1afe19d92ceafc19868ceaaff7ca91d415f7e02106e127a21e0944e2ebf9f24

  • SHA512

    d8e546396aebd33072b47fb5a0608c30ceae15524fb48f03deec2325e881959dd724d6deda9eb363ffc8484bbad6dd0335dd2f0b1f75ac54838e752d12a15843

  • SSDEEP

    1536:69gBeHbiMX4cHa0aZL/TsUAd/7MnneIOAPZ6y1Dib9pJkq5ODXuzALzZ:69gBqtXpHgCzMnneI3P012XuzA5

Score
10/10

Malware Config

Extracted

Family

mirai

Botnet

BOTNET

Targets

    • Target

      mpsl.elf

    • Size

      95KB

    • MD5

      2b671c0e7ee1068632e6d2ff298c7486

    • SHA1

      dc3d668edbe45dedc44460ec4878c0025063de01

    • SHA256

      b1afe19d92ceafc19868ceaaff7ca91d415f7e02106e127a21e0944e2ebf9f24

    • SHA512

      d8e546396aebd33072b47fb5a0608c30ceae15524fb48f03deec2325e881959dd724d6deda9eb363ffc8484bbad6dd0335dd2f0b1f75ac54838e752d12a15843

    • SSDEEP

      1536:69gBeHbiMX4cHa0aZL/TsUAd/7MnneIOAPZ6y1Dib9pJkq5ODXuzALzZ:69gBqtXpHgCzMnneI3P012XuzA5

    Score
    9/10
    • Contacts a large (226284) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

    • Unexpected DNS network traffic destination

      Network traffic to other servers than the configured DNS servers was detected on the DNS port.

MITRE ATT&CK Enterprise v15

Tasks