General

  • Target

    d995822d452a92285cfe97658c2ee62f8f8fd55439d6daf84b06c84ab6196d14.elf

  • Size

    33KB

  • Sample

    241231-dhbpvstpcy

  • MD5

    0a88c4f37f94f22f13ba7fbafc59f8db

  • SHA1

    b49ac1f54aacc8fd24b6db3206ce9082a0528492

  • SHA256

    d995822d452a92285cfe97658c2ee62f8f8fd55439d6daf84b06c84ab6196d14

  • SHA512

    e8b68041bc6fedd20a7a468fe8b401502438eec4186d34e9df6e51af0890d77987106d405bbbc1fa1a344ca1056a225833d1cb1c11ea5a2771db3c8c88fbd129

  • SSDEEP

    768:QyqTG+N2S+JiE0o0u/ygPTXiz3ljvUCLTyz0MmV5i5dwO1TmJgGlzDpbuR1JUz:wfN2GE0U/vPTXiRjtL60McAaMSVJuKz

Score
10/10

Malware Config

Extracted

Family

mirai

C2

e.xijinping.mov

Targets

    • Target

      d995822d452a92285cfe97658c2ee62f8f8fd55439d6daf84b06c84ab6196d14.elf

    • Size

      33KB

    • MD5

      0a88c4f37f94f22f13ba7fbafc59f8db

    • SHA1

      b49ac1f54aacc8fd24b6db3206ce9082a0528492

    • SHA256

      d995822d452a92285cfe97658c2ee62f8f8fd55439d6daf84b06c84ab6196d14

    • SHA512

      e8b68041bc6fedd20a7a468fe8b401502438eec4186d34e9df6e51af0890d77987106d405bbbc1fa1a344ca1056a225833d1cb1c11ea5a2771db3c8c88fbd129

    • SSDEEP

      768:QyqTG+N2S+JiE0o0u/ygPTXiz3ljvUCLTyz0MmV5i5dwO1TmJgGlzDpbuR1JUz:wfN2GE0U/vPTXiRjtL60McAaMSVJuKz

    Score
    10/10
    • Mirai

      Mirai is a prevalent Linux malware infecting exposed network devices.

    • Mirai family

    • Deletes itself

    • Traces itself

      Traces itself to prevent debugging attempts

    • Writes file to system bin folder

MITRE ATT&CK Matrix

Tasks