General

  • Target

    ad6e8c2de88008b117dc667ecf1ad9a2978fe804a4104179f8b462f7bff50e45.elf

  • Size

    53KB

  • Sample

    250308-ptl6hsw1gs

  • MD5

    31bcd9e446e42caf4d082101a84ef163

  • SHA1

    42aba4dac808bf569cdc8aee2cf0c63490e5c694

  • SHA256

    ad6e8c2de88008b117dc667ecf1ad9a2978fe804a4104179f8b462f7bff50e45

  • SHA512

    c66bb95b66ca9bc710c660c92e6c4243ca41953b1e9b8970a250e0f0d80805b1af729bedf695da8429c2b19664cbeb5928867b3c4376129e359b5b0bf97784db

  • SSDEEP

    768:Tvhx9VbUUccIdCbpcO/H2ahRK75OfTOH2pgY+xZUKNWAlyhLKXtCOxwchLEsVBWM:TnVWdqrHJRK6OH2GY+9LyOXtCOKYr

Malware Config

Targets

    • Target

      ad6e8c2de88008b117dc667ecf1ad9a2978fe804a4104179f8b462f7bff50e45.elf

    • Size

      53KB

    • MD5

      31bcd9e446e42caf4d082101a84ef163

    • SHA1

      42aba4dac808bf569cdc8aee2cf0c63490e5c694

    • SHA256

      ad6e8c2de88008b117dc667ecf1ad9a2978fe804a4104179f8b462f7bff50e45

    • SHA512

      c66bb95b66ca9bc710c660c92e6c4243ca41953b1e9b8970a250e0f0d80805b1af729bedf695da8429c2b19664cbeb5928867b3c4376129e359b5b0bf97784db

    • SSDEEP

      768:Tvhx9VbUUccIdCbpcO/H2ahRK75OfTOH2pgY+xZUKNWAlyhLKXtCOxwchLEsVBWM:TnVWdqrHJRK6OH2GY+9LyOXtCOKYr

    • Mirai

      Mirai is a prevalent Linux malware infecting exposed network devices.

    • Mirai family

    • Contacts a large (23750) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

MITRE ATT&CK Enterprise v15

Tasks