General

  • Target

    Aqua.mpsl.elf

  • Size

    99KB

  • Sample

    250102-rsefdsvndy

  • MD5

    7bb031dae70313f86cea566e1f9befb8

  • SHA1

    df961a253539710d0536f4d71ab99e427182652d

  • SHA256

    870cdb772ccaccbec226b36358940b116d95502bad2b55d2b4fb52478dd27cec

  • SHA512

    01986c08f0c6e87017086355d8589dfba08a47b59af37de6b9655a924973a402133bf17c4ccb7229e4e8a5484f69c02c21d1d108f3c6f28429f837c0dc2adbdc

  • SSDEEP

    1536:jHUYxWHuWXEtOs23Mq4WEqMRsiCzZXTvgstW4CZJqewYVn2GJXTAYWg2GSio:j0YxWHqyyaFXTvDHCxrt1Y

Score
10/10

Malware Config

Extracted

Family

mirai

Botnet

BOTNET

C2

boats.dogmuncher.xyz

89.190.156.145

Targets

    • Target

      Aqua.mpsl.elf

    • Size

      99KB

    • MD5

      7bb031dae70313f86cea566e1f9befb8

    • SHA1

      df961a253539710d0536f4d71ab99e427182652d

    • SHA256

      870cdb772ccaccbec226b36358940b116d95502bad2b55d2b4fb52478dd27cec

    • SHA512

      01986c08f0c6e87017086355d8589dfba08a47b59af37de6b9655a924973a402133bf17c4ccb7229e4e8a5484f69c02c21d1d108f3c6f28429f837c0dc2adbdc

    • SSDEEP

      1536:jHUYxWHuWXEtOs23Mq4WEqMRsiCzZXTvgstW4CZJqewYVn2GJXTAYWg2GSio:j0YxWHqyyaFXTvDHCxrt1Y

    Score
    7/10
    • Deletes itself

    • Unexpected DNS network traffic destination

      Network traffic to other servers than the configured DNS servers was detected on the DNS port.

    • Enumerates running processes

      Discovers information about currently running processes on the system

MITRE ATT&CK Matrix

Tasks