General

  • Target

    231aa568e46b3216ef77807c40c6d8d809ef60cc6829d79ebf06513e900bdf5a

  • Size

    178KB

  • Sample

    250307-w47crsvscx

  • MD5

    8d6f54d0a32a19f067852e359f24c615

  • SHA1

    c5800fa33eab7ba08c239ca5fb24f01e0d541dc7

  • SHA256

    231aa568e46b3216ef77807c40c6d8d809ef60cc6829d79ebf06513e900bdf5a

  • SHA512

    8940ae51e0a6e3dea0709a7694497e78bd6eb4b45d5fe4498734bbc3d59aaf86c6b28f0fee182ee60056fddc9e12677d6f0aad649cb76ca9204322762d1679c5

  • SSDEEP

    3072:rYufNoam9juxCJMzHoabXryoLpaquQ+mhDhft7bwbZnlyOW7/M/9AKfzsL:EucsWKoabXryoLfuQ+wJwRlyOWrM/9Ap

Malware Config

Extracted

Family

mirai

Botnet

MIRAI

C2

hjfdjkahfkejw.chickenkiller.com

Targets

    • Target

      231aa568e46b3216ef77807c40c6d8d809ef60cc6829d79ebf06513e900bdf5a

    • Size

      178KB

    • MD5

      8d6f54d0a32a19f067852e359f24c615

    • SHA1

      c5800fa33eab7ba08c239ca5fb24f01e0d541dc7

    • SHA256

      231aa568e46b3216ef77807c40c6d8d809ef60cc6829d79ebf06513e900bdf5a

    • SHA512

      8940ae51e0a6e3dea0709a7694497e78bd6eb4b45d5fe4498734bbc3d59aaf86c6b28f0fee182ee60056fddc9e12677d6f0aad649cb76ca9204322762d1679c5

    • SSDEEP

      3072:rYufNoam9juxCJMzHoabXryoLpaquQ+mhDhft7bwbZnlyOW7/M/9AKfzsL:EucsWKoabXryoLfuQ+wJwRlyOWrM/9Ap

    • Contacts a large (176706) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

    • File and Directory Permissions Modification

      Adversaries may modify file or directory permissions to evade defenses.

MITRE ATT&CK Enterprise v15

Tasks