General

  • Target

    Aqua.i686.elf

  • Size

    65KB

  • Sample

    241229-svq3mstqgj

  • MD5

    5f0ad2307fb3c605bc6228ea56ed6b59

  • SHA1

    6fa8394a35e6cc6dc5c43622d4df5a185b66e2ac

  • SHA256

    8a57e91abababa5fbcd0414e068885572aad724585355fce4246ab8bb4a4b5f0

  • SHA512

    ff17b06c6d359bf01d6a93cec4a48205e6f953b82e0f6e073d663acba851e6c6f4ac1a92bc59aed379d81f78bd622a2b188e7347a8d1a93afbc1fd2a976d104f

  • SSDEEP

    1536:R+XkIsiWIGc8k1KDVmU7tp/HOaLWZsh1RaCrZqfCxCEE3H:R+XvsidGyKDVmU7tpvOVih1RaCl+N

Malware Config

Extracted

Family

mirai

Botnet

BOTNET

C2

boats.dogmuncher.xyz

89.190.156.145

Targets

    • Target

      Aqua.i686.elf

    • Size

      65KB

    • MD5

      5f0ad2307fb3c605bc6228ea56ed6b59

    • SHA1

      6fa8394a35e6cc6dc5c43622d4df5a185b66e2ac

    • SHA256

      8a57e91abababa5fbcd0414e068885572aad724585355fce4246ab8bb4a4b5f0

    • SHA512

      ff17b06c6d359bf01d6a93cec4a48205e6f953b82e0f6e073d663acba851e6c6f4ac1a92bc59aed379d81f78bd622a2b188e7347a8d1a93afbc1fd2a976d104f

    • SSDEEP

      1536:R+XkIsiWIGc8k1KDVmU7tp/HOaLWZsh1RaCrZqfCxCEE3H:R+XvsidGyKDVmU7tpvOVih1RaCl+N

    Score
    7/10
    • Deletes itself

    • Unexpected DNS network traffic destination

      Network traffic to other servers than the configured DNS servers was detected on the DNS port.

    • Enumerates running processes

      Discovers information about currently running processes on the system

MITRE ATT&CK Matrix

Tasks