General

  • Target

    2b671c0e7ee1068632e6d2ff298c7486.bin

  • Size

    43KB

  • Sample

    241222-bg4cdaxlek

  • MD5

    1a060b6f1a498a1da3c6c8fdb61959df

  • SHA1

    1e44bf8171ecc332dd6d80b599a078461576d807

  • SHA256

    93df3f63d22c17aa06891eb4be9f827c09f3282b8d34df90f39ca1bf6be7c124

  • SHA512

    eb4bb402d19529dec29023c0a3870d8917c22f96893ef578d4f60abc9c9c62d20c3a27a8edc6f7a28e8aa5116588d05906e6db01b66edc9e3c48ad702df4ea36

  • SSDEEP

    768:1uxXFowPS47gTpBxTXbvaZCG0S0szEkjFe/Y9fB/BCMoUzoObYzXG1MFhZ85pADU:1SPS4Mbva701WEkB5/cMoUzoOgW1MF8B

Score
10/10

Malware Config

Extracted

Family

mirai

Botnet

BOTNET

Targets

    • Target

      b1afe19d92ceafc19868ceaaff7ca91d415f7e02106e127a21e0944e2ebf9f24.elf

    • Size

      95KB

    • MD5

      2b671c0e7ee1068632e6d2ff298c7486

    • SHA1

      dc3d668edbe45dedc44460ec4878c0025063de01

    • SHA256

      b1afe19d92ceafc19868ceaaff7ca91d415f7e02106e127a21e0944e2ebf9f24

    • SHA512

      d8e546396aebd33072b47fb5a0608c30ceae15524fb48f03deec2325e881959dd724d6deda9eb363ffc8484bbad6dd0335dd2f0b1f75ac54838e752d12a15843

    • SSDEEP

      1536:69gBeHbiMX4cHa0aZL/TsUAd/7MnneIOAPZ6y1Dib9pJkq5ODXuzALzZ:69gBqtXpHgCzMnneI3P012XuzA5

    Score
    9/10
    • Contacts a large (271608) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

    • Unexpected DNS network traffic destination

      Network traffic to other servers than the configured DNS servers was detected on the DNS port.

MITRE ATT&CK Enterprise v15

Tasks