Overview

overview

10

Static

static

10

ngwa5.elf

debian-9-armhf

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    ngwa5.elf

  • Size

    138KB

  • Sample

    250106-3fe2yavmcp

  • MD5

    86553d36841e35d034d3798a7d96537f

  • SHA1

    fe90d24f9237c911b14836991fa0241e781bd0c4

  • SHA256

    26a24796548c4054f85669c3d83b79f07653baf63aeeee9a5058eed6a07b6c94

  • SHA512

    63e91b909ccf82d06861341bf5b44d341777e4818d66664abef2f18d63b0de06b22e1413d01ca4dc87e9b7842cd2e588d25f6174835bc25f0c3a4569297bcba2

  • SSDEEP

    1536:I9ApxSazhQBHN/dutr2W8g4VKlhTO4tE+GROXbQSxWjg81lcNwywc2GfFJRbPDhR:I932metr/46ha4t1Y+WctyL+c

Score
10/10
miraibotnetdiscovery

Malware Config

Extracted

Family

mirai

Botnet

BOTNET

C2

boats.dogmuncher.xyz

89.190.156.145

Targets

    • Target

      ngwa5.elf

    • Size

      138KB

    • MD5

      86553d36841e35d034d3798a7d96537f

    • SHA1

      fe90d24f9237c911b14836991fa0241e781bd0c4

    • SHA256

      26a24796548c4054f85669c3d83b79f07653baf63aeeee9a5058eed6a07b6c94

    • SHA512

      63e91b909ccf82d06861341bf5b44d341777e4818d66664abef2f18d63b0de06b22e1413d01ca4dc87e9b7842cd2e588d25f6174835bc25f0c3a4569297bcba2

    • SSDEEP

      1536:I9ApxSazhQBHN/dutr2W8g4VKlhTO4tE+GROXbQSxWjg81lcNwywc2GfFJRbPDhR:I932metr/46ha4t1Y+WctyL+c

    Score
    7/10
    discovery

    • Deletes itself

    • Enumerates running processes

      Discovers information about currently running processes on the system

    behavioral1

MITRE ATT&CK Matrix

Tasks