General

  • Target

    8ea3f1df33e88b32e7e40f8f8e81f0dbc52f1f346014931fbd29211e29e05156.elf

  • Size

    112KB

  • Sample

    250308-m7fvjswsew

  • MD5

    d952a15c3bae79d86df5240f37147edb

  • SHA1

    5258468ce8f96691caf2228347bd52a69dd2ae40

  • SHA256

    8ea3f1df33e88b32e7e40f8f8e81f0dbc52f1f346014931fbd29211e29e05156

  • SHA512

    1282e048718d974d0f574fb4b486d4a2a732e718cd98c68d5fe9f3cb3bc644c9b8250d08c78c27fc83d343a4007030d9e1c2462fc521f199498acd8eb1d15869

  • SSDEEP

    3072:osC1R1THYzx/ldMxaj7egJo+Z0MEoL5jeiFJVc0qB7HK1h+x4zwbZnHv:oskXTHYzx/ldn72gjeiFJVcLrk8uwRHv

Malware Config

Extracted

Family

mirai

Botnet

MIRAI

C2

hjfdjkahfkejw.chickenkiller.com

Targets

    • Target

      8ea3f1df33e88b32e7e40f8f8e81f0dbc52f1f346014931fbd29211e29e05156.elf

    • Size

      112KB

    • MD5

      d952a15c3bae79d86df5240f37147edb

    • SHA1

      5258468ce8f96691caf2228347bd52a69dd2ae40

    • SHA256

      8ea3f1df33e88b32e7e40f8f8e81f0dbc52f1f346014931fbd29211e29e05156

    • SHA512

      1282e048718d974d0f574fb4b486d4a2a732e718cd98c68d5fe9f3cb3bc644c9b8250d08c78c27fc83d343a4007030d9e1c2462fc521f199498acd8eb1d15869

    • SSDEEP

      3072:osC1R1THYzx/ldMxaj7egJo+Z0MEoL5jeiFJVc0qB7HK1h+x4zwbZnHv:oskXTHYzx/ldn72gjeiFJVcLrk8uwRHv

    • Contacts a large (178599) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

    • File and Directory Permissions Modification

      Adversaries may modify file or directory permissions to evade defenses.

MITRE ATT&CK Enterprise v15

Tasks