General

  • Target

    sora.mips.elf

  • Size

    28KB

  • Sample

    250215-3wt6ss1ndw

  • MD5

    fa9b6c7c37b9749884b432b1cfcd447c

  • SHA1

    1ddf712db6bf2948950b7fd884766a1a5d2b4294

  • SHA256

    4a18c7f6e74bc6f4a20f948c8b0555f4688c80740a5eb9d3388fc8930ac65432

  • SHA512

    2f8f653f60de4a0562e524fb9993175a46b946e1fe476f3e180558baa0462f5725549c6587ad1b264df98cee8438adfab8bab7014ef423ff7a554ee59e9ef806

  • SSDEEP

    768:fxMWBhAHuLeVIGt5B2LlUqw6Xrw0RE9JYPEJgGlzDpbuR1JW:fxdBGuLeBUlZ7w0S9WP8VJu8

Malware Config

Extracted

Family

mirai

Botnet

SORA

Targets

    • Target

      sora.mips.elf

    • Size

      28KB

    • MD5

      fa9b6c7c37b9749884b432b1cfcd447c

    • SHA1

      1ddf712db6bf2948950b7fd884766a1a5d2b4294

    • SHA256

      4a18c7f6e74bc6f4a20f948c8b0555f4688c80740a5eb9d3388fc8930ac65432

    • SHA512

      2f8f653f60de4a0562e524fb9993175a46b946e1fe476f3e180558baa0462f5725549c6587ad1b264df98cee8438adfab8bab7014ef423ff7a554ee59e9ef806

    • SSDEEP

      768:fxMWBhAHuLeVIGt5B2LlUqw6Xrw0RE9JYPEJgGlzDpbuR1JW:fxdBGuLeBUlZ7w0S9WP8VJu8

    • Mirai

      Mirai is a prevalent Linux malware infecting exposed network devices.

    • Mirai family

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

MITRE ATT&CK Enterprise v15

Tasks