General

  • Target

    mips

  • Size

    97KB

  • Sample

    241231-v8xtfs1mgs

  • MD5

    be677d92a8b44961346c33c3dda3ac9b

  • SHA1

    ee0eadfb6784f64e3c4d0425a7bfe4604fe71b12

  • SHA256

    f9018b2f7e5bce62ce0463f15979a0d96099df6139d90b42de96d3babeb41839

  • SHA512

    53ce21a0c53bfc219323bede3119881f4c882c460f888f42da31922b7b6e78cda7f18de6af4759b3a1a9014a9c024a8bd0d263cefeef2f6a436dce11d9c0eda1

  • SSDEEP

    1536:v9nRZa1K3tghjb67PtSi9t71L2hh1BobTExPCQxuSedNa0O:VRZag3tgNYtt7MNobTExPXxuda0O

Malware Config

Extracted

Family

mirai

Botnet

MIRAI

Targets

    • Target

      mips

    • Size

      97KB

    • MD5

      be677d92a8b44961346c33c3dda3ac9b

    • SHA1

      ee0eadfb6784f64e3c4d0425a7bfe4604fe71b12

    • SHA256

      f9018b2f7e5bce62ce0463f15979a0d96099df6139d90b42de96d3babeb41839

    • SHA512

      53ce21a0c53bfc219323bede3119881f4c882c460f888f42da31922b7b6e78cda7f18de6af4759b3a1a9014a9c024a8bd0d263cefeef2f6a436dce11d9c0eda1

    • SSDEEP

      1536:v9nRZa1K3tghjb67PtSi9t71L2hh1BobTExPCQxuSedNa0O:VRZag3tgNYtt7MNobTExPXxuda0O

    • Deletes Audit logs

      Deletes logs related to the Linux Audit framework.

    • Deletes itself

    • Deletes system logs

      Deletes log file which contains global system messages. Adversaries may delete system logs to minimize their footprint.

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    • Deletes log files

      Deletes log files on the system.

    • Enumerates running processes

      Discovers information about currently running processes on the system

MITRE ATT&CK Enterprise v15

Tasks