mirai | 3a890af148ebca93bf4df29e95edb3e6a0c60f924124cb0bac553cd024bfe420 | Triage

Sharing

General

Target

3a890af148ebca93bf4df29e95edb3e6a0c60f924124cb0bac553cd024bfe420.elf
Size

139KB
Sample

241230-cm2w6svjax
MD5

76eb5da6b6f168847d7bb611093134bf
SHA1

7e9b7d688ea2817731f2021a683d7dd73475688f
SHA256

3a890af148ebca93bf4df29e95edb3e6a0c60f924124cb0bac553cd024bfe420
SHA512

16b65707969b75831d584097e0a14a119ef974e1ab153561d83d44ef192a47b6f9bdbd0cd60442a387db1dcdb25646bb2a86a305074c01bbc961910f26888fa8
SSDEEP

3072:XIqKwz8TMTlaxy0lMyQIu5uDW1YjAHV7kp0D/:9oclaxBbQIC8RMupu/

Score

10^/10

mirai discovery

Malware Config

Targets

- Target
  
  3a890af148ebca93bf4df29e95edb3e6a0c60f924124cb0bac553cd024bfe420.elf
- Size
  
  139KB
- MD5
  
  76eb5da6b6f168847d7bb611093134bf
- SHA1
  
  7e9b7d688ea2817731f2021a683d7dd73475688f
- SHA256
  
  3a890af148ebca93bf4df29e95edb3e6a0c60f924124cb0bac553cd024bfe420
- SHA512
  
  16b65707969b75831d584097e0a14a119ef974e1ab153561d83d44ef192a47b6f9bdbd0cd60442a387db1dcdb25646bb2a86a305074c01bbc961910f26888fa8
- SSDEEP
  
  3072:XIqKwz8TMTlaxy0lMyQIu5uDW1YjAHV7kp0D/:9oclaxBbQIC8RMupu/
Score

6^/10

discovery
- Enumerates active TCP sockets
  Gets active TCP sockets from /proc virtual filesystem.
  discovery
behavioral1

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Network Configuration Discovery

Internet Connection Discovery

System Network Connections Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1