General

  • Target

    5019aca5dff16abfe11eb321ec762e9d67d7282ae2bac163e3209a1dadc2d5b1.elf

  • Size

    93KB

  • Sample

    250308-hzs3patj16

  • MD5

    fcfc2dd416618a5ab1671417f2836883

  • SHA1

    722fd5f0aab4b234172b363a395546f51a4ec72d

  • SHA256

    5019aca5dff16abfe11eb321ec762e9d67d7282ae2bac163e3209a1dadc2d5b1

  • SHA512

    25ad75d1199b8cd5924c9f33b2d7b95a0ac95ded62f29d256e478ff7a18ed2a45440ae6951214358551031a7a9ae24e92538a4449d351bd4af2394cd11563b49

  • SSDEEP

    1536:Er6WDkiCNrvwjU+52FPqFE8qfA5o5EJnz5MCMPV9t9DiO2vhJJs92kvUpCYowbZ5:Er6W7csWDKJJMPVRiO2WZNPwbZn5

Malware Config

Extracted

Family

mirai

Botnet

MIRAI

C2

hjfdjkahfkejw.chickenkiller.com

Targets

    • Target

      5019aca5dff16abfe11eb321ec762e9d67d7282ae2bac163e3209a1dadc2d5b1.elf

    • Size

      93KB

    • MD5

      fcfc2dd416618a5ab1671417f2836883

    • SHA1

      722fd5f0aab4b234172b363a395546f51a4ec72d

    • SHA256

      5019aca5dff16abfe11eb321ec762e9d67d7282ae2bac163e3209a1dadc2d5b1

    • SHA512

      25ad75d1199b8cd5924c9f33b2d7b95a0ac95ded62f29d256e478ff7a18ed2a45440ae6951214358551031a7a9ae24e92538a4449d351bd4af2394cd11563b49

    • SSDEEP

      1536:Er6WDkiCNrvwjU+52FPqFE8qfA5o5EJnz5MCMPV9t9DiO2vhJJs92kvUpCYowbZ5:Er6W7csWDKJJMPVRiO2WZNPwbZn5

    • Contacts a large (194719) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

    • File and Directory Permissions Modification

      Adversaries may modify file or directory permissions to evade defenses.

MITRE ATT&CK Enterprise v15

Tasks