General

  • Target

    f7c7141d081cddf63d71eb722d0ef2ca.bin

  • Size

    72KB

  • Sample

    250103-cae7msvjex

  • MD5

    e1bd03e0b042db86b92e6ae81742f2a7

  • SHA1

    9f284a6262f964dd5dd7a0093f781061e20afadd

  • SHA256

    36b766ba4c98660905ef7e3e6d22a07576c48017e0df39102ae28148ac2a7fdd

  • SHA512

    9e90474c49e7166e02c616ae03071888be89946011f19c4aec4d43d30c0540c30531b9beb4fe46412b75d493c6d8045ca360b6022934fa7039bbe0fae8bd4604

  • SSDEEP

    1536:ExIpFjMCMzqm7ASdz4VoDxK/w751zc8MFeGNmvQLA1mkSChikGJ:Ex6FjHMemsS5aoDWk5G5sQVkSpx

Malware Config

Extracted

Family

mirai

Botnet

MIRAI

Targets

    • Target

      e3e0e99c4d08f0af5becc66530373e636ddcf01cf9c37bfe3e79a45caf902bce.elf

    • Size

      168KB

    • MD5

      f7c7141d081cddf63d71eb722d0ef2ca

    • SHA1

      78b8bf89c41558dc3bc3778cc553604b99b4e958

    • SHA256

      e3e0e99c4d08f0af5becc66530373e636ddcf01cf9c37bfe3e79a45caf902bce

    • SHA512

      ab8c683d8f1eca439593a697705879612b6d8c03f06a97f49b90db4e2a5be6d292d519407f2180c9429f1cdf476857921c36c4e8fdb7fb7733b7ee25a7583ceb

    • SSDEEP

      3072:UqwG+C1QTlrI1fXUjtaBkZzOQEPox/la4OosRMDjjWOagM/9QegU9:UqwGKrwfkpaBkZzOQEQx/Q4AqjjWOhMV

    • Deletes itself

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    • Modifies systemd

      Adds/ modifies systemd service files. Likely to achieve persistence.

MITRE ATT&CK Enterprise v15

Tasks