General

  • Target

    64b7a41ec5ab3ad50c54bffc0027314597ad51d305a4e8c7580b0ea9af950541.elf

  • Size

    44KB

  • Sample

    250104-dpmeyayjet

  • MD5

    eec3f3bb3e43d2708337cb1a9d3c55e8

  • SHA1

    9cddb3cc3cc1482735c25795cff5676d9c0addba

  • SHA256

    64b7a41ec5ab3ad50c54bffc0027314597ad51d305a4e8c7580b0ea9af950541

  • SHA512

    a67c57edf663d176174c423c88ab2befdd486f12ba60cf240601a81bf7fc8273634bcf4491140926ca434ad905f71342fc151d6ccd87e25db59c3ecd9b4ecb9b

  • SSDEEP

    768:JDpazul5ouhJSaHWut0mf1Ywsm4l1AEcx9FX59ncjy53bOwYmzs:JDpazul5ouhAhuNff4l1AEqTncjA36v9

Malware Config

Extracted

Family

mirai

Botnet

BOTNET

Targets

    • Target

      64b7a41ec5ab3ad50c54bffc0027314597ad51d305a4e8c7580b0ea9af950541.elf

    • Size

      44KB

    • MD5

      eec3f3bb3e43d2708337cb1a9d3c55e8

    • SHA1

      9cddb3cc3cc1482735c25795cff5676d9c0addba

    • SHA256

      64b7a41ec5ab3ad50c54bffc0027314597ad51d305a4e8c7580b0ea9af950541

    • SHA512

      a67c57edf663d176174c423c88ab2befdd486f12ba60cf240601a81bf7fc8273634bcf4491140926ca434ad905f71342fc151d6ccd87e25db59c3ecd9b4ecb9b

    • SSDEEP

      768:JDpazul5ouhJSaHWut0mf1Ywsm4l1AEcx9FX59ncjy53bOwYmzs:JDpazul5ouhAhuNff4l1AEqTncjA36v9

    • Contacts a large (114133) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

MITRE ATT&CK Enterprise v15

Tasks