General

  • Target

    9d4415fd65db4770ae6b64e75c75bf9da18a2ed8056222bc79a2916770b12d75.elf

  • Size

    66KB

  • Sample

    250202-fcfgzaxpbj

  • MD5

    4d5c4b1a02a62a0bf68d340105d8adf5

  • SHA1

    9779d0f1e71d46f43184def7071c7f7260edc125

  • SHA256

    9d4415fd65db4770ae6b64e75c75bf9da18a2ed8056222bc79a2916770b12d75

  • SHA512

    b73b7c36b36fb1bacfcc0afbe4610a30d1f59408877fc5a7fc20bf7c785dc014dd8ee83aac2769ecf5c825908559d530ed14754885f2b48915d64ae252bdde55

  • SSDEEP

    1536:Hs9nvjgFUI6FMc3nAI6j18MtabBU2L37ydQQQxWl09XgrvtjcP:H8vjwRwMc3APpzt4BJ/HQQxWKgrv5cP

Malware Config

Extracted

Family

mirai

C2

kurwa.barsoeb.space

Targets

    • Target

      9d4415fd65db4770ae6b64e75c75bf9da18a2ed8056222bc79a2916770b12d75.elf

    • Size

      66KB

    • MD5

      4d5c4b1a02a62a0bf68d340105d8adf5

    • SHA1

      9779d0f1e71d46f43184def7071c7f7260edc125

    • SHA256

      9d4415fd65db4770ae6b64e75c75bf9da18a2ed8056222bc79a2916770b12d75

    • SHA512

      b73b7c36b36fb1bacfcc0afbe4610a30d1f59408877fc5a7fc20bf7c785dc014dd8ee83aac2769ecf5c825908559d530ed14754885f2b48915d64ae252bdde55

    • SSDEEP

      1536:Hs9nvjgFUI6FMc3nAI6j18MtabBU2L37ydQQQxWl09XgrvtjcP:H8vjwRwMc3APpzt4BJ/HQQxWKgrv5cP

    Score
    7/10
    • Deletes itself

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    • Traces itself

      Traces itself to prevent debugging attempts

    • Writes file to system bin folder

MITRE ATT&CK Enterprise v15

Tasks