General
-
Target
5r3fqt67ew531has4231.arm7.elf
-
Size
178KB
-
Sample
250307-r63p5ssmw5
-
MD5
8d6f54d0a32a19f067852e359f24c615
-
SHA1
c5800fa33eab7ba08c239ca5fb24f01e0d541dc7
-
SHA256
231aa568e46b3216ef77807c40c6d8d809ef60cc6829d79ebf06513e900bdf5a
-
SHA512
8940ae51e0a6e3dea0709a7694497e78bd6eb4b45d5fe4498734bbc3d59aaf86c6b28f0fee182ee60056fddc9e12677d6f0aad649cb76ca9204322762d1679c5
-
SSDEEP
3072:rYufNoam9juxCJMzHoabXryoLpaquQ+mhDhft7bwbZnlyOW7/M/9AKfzsL:EucsWKoabXryoLfuQ+wJwRlyOWrM/9Ap
Behavioral task
behavioral1
Sample
5r3fqt67ew531has4231.arm7.elf
Resource
debian9-armhf-20240611-en
Malware Config
Extracted
mirai
MIRAI
hjfdjkahfkejw.chickenkiller.com
Targets
-
-
Target
5r3fqt67ew531has4231.arm7.elf
-
Size
178KB
-
MD5
8d6f54d0a32a19f067852e359f24c615
-
SHA1
c5800fa33eab7ba08c239ca5fb24f01e0d541dc7
-
SHA256
231aa568e46b3216ef77807c40c6d8d809ef60cc6829d79ebf06513e900bdf5a
-
SHA512
8940ae51e0a6e3dea0709a7694497e78bd6eb4b45d5fe4498734bbc3d59aaf86c6b28f0fee182ee60056fddc9e12677d6f0aad649cb76ca9204322762d1679c5
-
SSDEEP
3072:rYufNoam9juxCJMzHoabXryoLpaquQ+mhDhft7bwbZnlyOW7/M/9AKfzsL:EucsWKoabXryoLfuQ+wJwRlyOWrM/9Ap
Score9/10-
Contacts a large (195217) amount of remote hosts
This may indicate a network scan to discover remotely running services.
-
Creates a large amount of network flows
This may indicate a network scan to discover remotely running services.
-
File and Directory Permissions Modification
Adversaries may modify file or directory permissions to evade defenses.
-