General

  • Target

    9302ba7444c152e1ffcb2eb3b4a8615bdcf26e7f6549a77eb09d829c2bd16645.elf

  • Size

    51KB

  • Sample

    250115-dhlvtsylfz

  • MD5

    276fe1685110331057cd5a3e74d44376

  • SHA1

    c8583fc07dc597a9a964096b0b543a3c8cb1d109

  • SHA256

    9302ba7444c152e1ffcb2eb3b4a8615bdcf26e7f6549a77eb09d829c2bd16645

  • SHA512

    f1b70eb3151b91052991a6f382741ee558064f209f58cc7c973331e8270a880287cd810dc12325a353ae6583b0f87d411cbc872c5e9bb5915c2d576483ba1674

  • SSDEEP

    768:q3ltpsNJvJkRbX8lF9nN+xVM+wJqRXHQnoocH+ZkHPESOXhS9X2/NPOBzGkUzg:6tYJwS9nNWTwJ6XHQn6+ZkvJ4tYBas

Malware Config

Extracted

Family

mirai

Botnet

BOTNET

Targets

    • Target

      9302ba7444c152e1ffcb2eb3b4a8615bdcf26e7f6549a77eb09d829c2bd16645.elf

    • Size

      51KB

    • MD5

      276fe1685110331057cd5a3e74d44376

    • SHA1

      c8583fc07dc597a9a964096b0b543a3c8cb1d109

    • SHA256

      9302ba7444c152e1ffcb2eb3b4a8615bdcf26e7f6549a77eb09d829c2bd16645

    • SHA512

      f1b70eb3151b91052991a6f382741ee558064f209f58cc7c973331e8270a880287cd810dc12325a353ae6583b0f87d411cbc872c5e9bb5915c2d576483ba1674

    • SSDEEP

      768:q3ltpsNJvJkRbX8lF9nN+xVM+wJqRXHQnoocH+ZkHPESOXhS9X2/NPOBzGkUzg:6tYJwS9nNWTwJ6XHQn6+ZkvJ4tYBas

    • Contacts a large (113871) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

MITRE ATT&CK Enterprise v15

Tasks