General

  • Target

    mips

  • Size

    98KB

  • Sample

    241231-qwqgdssndz

  • MD5

    19d9a11f6ebc16298e76f4ec3548a077

  • SHA1

    e0c164a4f9da1536828acec7fd9db3cf75950cd5

  • SHA256

    855b97db6e15db33233f81abbdd2913f52efcb25d943efb5e5f4cbbfd102f1e4

  • SHA512

    b0123f4a3c673922770da0b219a743564923310a6aee21741664f95a21586a3c57fcbae4247814b0f60a97187b006c9d52a56c3f1335fe46edf388734e86b60e

  • SSDEEP

    1536:jdEZWNdknoXkzFhwGGkCq9hUg8JABArDr3T/cx/exrHSYg:6ZWNenoX2nEq9qrrDr3TUxyHSD

Malware Config

Extracted

Family

mirai

Botnet

MIRAI

Targets

    • Target

      mips

    • Size

      98KB

    • MD5

      19d9a11f6ebc16298e76f4ec3548a077

    • SHA1

      e0c164a4f9da1536828acec7fd9db3cf75950cd5

    • SHA256

      855b97db6e15db33233f81abbdd2913f52efcb25d943efb5e5f4cbbfd102f1e4

    • SHA512

      b0123f4a3c673922770da0b219a743564923310a6aee21741664f95a21586a3c57fcbae4247814b0f60a97187b006c9d52a56c3f1335fe46edf388734e86b60e

    • SSDEEP

      1536:jdEZWNdknoXkzFhwGGkCq9hUg8JABArDr3T/cx/exrHSYg:6ZWNenoX2nEq9qrrDr3TUxyHSD

    • Deletes Audit logs

      Deletes logs related to the Linux Audit framework.

    • Deletes itself

    • Deletes system logs

      Deletes log file which contains global system messages. Adversaries may delete system logs to minimize their footprint.

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    • Deletes log files

      Deletes log files on the system.

    • Enumerates running processes

      Discovers information about currently running processes on the system

MITRE ATT&CK Enterprise v15

Tasks