mirai | 4bc210de5a0d0660b3f36c21486b94fbc2d447c4306824b4e6b95349023d7510 | Triage

Sharing

General

Target

4bc210de5a0d0660b3f36c21486b94fbc2d447c4306824b4e6b95349023d7510.elf
Size

61KB
Sample

241225-cqal4avkdn
MD5

7779c9056b747f05d9d0b5033f58080f
SHA1

adbd9c8299eb02f34460587ade84e13c8afaf732
SHA256

4bc210de5a0d0660b3f36c21486b94fbc2d447c4306824b4e6b95349023d7510
SHA512

5ef8d9bc2187a8ffecdb2a346f35da9d1a93de779ee8d4c8e65a4c144ae97649de3d55e2515efc437f1c6a6b4afd8cd92879287c806fb1f2681fca01637d30df
SSDEEP

1536:1BGfyT5OGMMt4cesUTeFIv5TzHhq6g80CIjOepn2+:1caT5OGMMtmaATzBq6p07KanL

Score

10^/10

mirai unstable linux rootkit

Malware Config

Extracted

Family

mirai

Botnet

UNSTABLE

C2

srvy.vlrt-gap.com

Targets

- Target
  
  4bc210de5a0d0660b3f36c21486b94fbc2d447c4306824b4e6b95349023d7510.elf
- Size
  
  61KB
- MD5
  
  7779c9056b747f05d9d0b5033f58080f
- SHA1
  
  adbd9c8299eb02f34460587ade84e13c8afaf732
- SHA256
  
  4bc210de5a0d0660b3f36c21486b94fbc2d447c4306824b4e6b95349023d7510
- SHA512
  
  5ef8d9bc2187a8ffecdb2a346f35da9d1a93de779ee8d4c8e65a4c144ae97649de3d55e2515efc437f1c6a6b4afd8cd92879287c806fb1f2681fca01637d30df
- SSDEEP
  
  1536:1BGfyT5OGMMt4cesUTeFIv5TzHhq6g80CIjOepn2+:1caT5OGMMtmaATzBq6p07KanL
Score

7^/10

rootkit
- Loads a kernel module
  Loads a Linux kernel module, potentially to achieve persistence
  rootkit
behavioral1

MITRE ATT&CK Matrix

Tasks

static1

behavioral1