Overview

overview

10

Static

static

10

RpcSecurity.mips.elf

debian-9-mips

6

Sharing

Copy URL
Twitter E-mail

General

  • Target

    RpcSecurity.mips.elf

  • Size

    75KB

  • Sample

    241227-f8allasmck

  • MD5

    b42000c87e42345dffd95c15b6ac2428

  • SHA1

    52e9fa49ce26d85ad5dfbabe98d8ed178705c542

  • SHA256

    324cf363149eb9264bac519d0cdb8fd93e3f211cd2e5cd3f9d784be8c1cb2ee0

  • SHA512

    c239f7931b97709b363be637d3f60b7c3c60b181d86ed636b2d7d3d51e49761009c76bde64ef81ca95fc5a3da1ba48e83450970a0f2e6720634a5cbb40e6babf

  • SSDEEP

    1536:bpxe5qoct9fdlQBI6rNnnUFndlBotYG9CJa10qDv:Fx3oANdiWndvomgC47

Score
10/10
miraidemonsdiscovery

Malware Config

Extracted

Family

mirai

Botnet

DEMONS

Targets

    • Target

      RpcSecurity.mips.elf

    • Size

      75KB

    • MD5

      b42000c87e42345dffd95c15b6ac2428

    • SHA1

      52e9fa49ce26d85ad5dfbabe98d8ed178705c542

    • SHA256

      324cf363149eb9264bac519d0cdb8fd93e3f211cd2e5cd3f9d784be8c1cb2ee0

    • SHA512

      c239f7931b97709b363be637d3f60b7c3c60b181d86ed636b2d7d3d51e49761009c76bde64ef81ca95fc5a3da1ba48e83450970a0f2e6720634a5cbb40e6babf

    • SSDEEP

      1536:bpxe5qoct9fdlQBI6rNnnUFndlBotYG9CJa10qDv:Fx3oANdiWndvomgC47

    Score
    6/10
    discovery

    • Enumerates active TCP sockets

      Gets active TCP sockets from /proc virtual filesystem.

      discovery
    behavioral1

MITRE ATT&CK Enterprise v15

Tasks