General

  • Target

    c1916587699fe975eb4d206cedb6be5dbae99ad4ea8426f08117c7f23dbb7d22.elf

  • Size

    83KB

  • Sample

    241221-dkvwhs1phm

  • MD5

    9232a514454eaa6e6d5a4a742a9c4fdd

  • SHA1

    1af8a8b2d2138b901524f1286e9402e59ffb4512

  • SHA256

    c1916587699fe975eb4d206cedb6be5dbae99ad4ea8426f08117c7f23dbb7d22

  • SHA512

    49b5e2ceefb72dffb2e196d5358a97d159ba9ddeb5f241e0ff432985b1e95fcb30453c8ebad1d2e2f62de4b83b6936dca2d78ad3c243cf3ea9cdd177970c14aa

  • SSDEEP

    1536:IjEf1x6aVaqVazoaUIFt2A+yDgBqviTx3Sifel8owsJef4pnwgfzv/:Lfn6HtJgSi8iuwsSgfzv/

Score
10/10

Malware Config

Extracted

Family

mirai

Botnet

BOTNET

Targets

    • Target

      c1916587699fe975eb4d206cedb6be5dbae99ad4ea8426f08117c7f23dbb7d22.elf

    • Size

      83KB

    • MD5

      9232a514454eaa6e6d5a4a742a9c4fdd

    • SHA1

      1af8a8b2d2138b901524f1286e9402e59ffb4512

    • SHA256

      c1916587699fe975eb4d206cedb6be5dbae99ad4ea8426f08117c7f23dbb7d22

    • SHA512

      49b5e2ceefb72dffb2e196d5358a97d159ba9ddeb5f241e0ff432985b1e95fcb30453c8ebad1d2e2f62de4b83b6936dca2d78ad3c243cf3ea9cdd177970c14aa

    • SSDEEP

      1536:IjEf1x6aVaqVazoaUIFt2A+yDgBqviTx3Sifel8owsJef4pnwgfzv/:Lfn6HtJgSi8iuwsSgfzv/

    Score
    9/10
    • Contacts a large (194543) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

    • Unexpected DNS network traffic destination

      Network traffic to other servers than the configured DNS servers was detected on the DNS port.

MITRE ATT&CK Enterprise v15

Tasks