General

  • Target

    e4d51ba3f02535d158997edf4ef749dc25eb8f0d0b9ae21739fd0bf07c93b8c4.elf

  • Size

    51KB

  • Sample

    250308-r4dm8syves

  • MD5

    217edc7babda546f2a25b56826abb972

  • SHA1

    ff1a8bf52531da6060b7ac2417e8df73b5df34b6

  • SHA256

    e4d51ba3f02535d158997edf4ef749dc25eb8f0d0b9ae21739fd0bf07c93b8c4

  • SHA512

    ca51421110e44ba57dfe932ca1aade8e16e0b2c45c744a7d438e775b381c7c9bf0bc7c6809a9074657d2b2eec29f601780fa0b46ed75898c33fa59d1848f01ac

  • SSDEEP

    768:o5TUC+CLfkdNRZ1thFo0ZYUdwSm3L5YWxnJPnt2aNj2amAMPzeYVXShc1r6xeOLQ:oeHNdtbo06QYxZEaBNMzShcZ6xVBFA

Malware Config

Targets

    • Target

      e4d51ba3f02535d158997edf4ef749dc25eb8f0d0b9ae21739fd0bf07c93b8c4.elf

    • Size

      51KB

    • MD5

      217edc7babda546f2a25b56826abb972

    • SHA1

      ff1a8bf52531da6060b7ac2417e8df73b5df34b6

    • SHA256

      e4d51ba3f02535d158997edf4ef749dc25eb8f0d0b9ae21739fd0bf07c93b8c4

    • SHA512

      ca51421110e44ba57dfe932ca1aade8e16e0b2c45c744a7d438e775b381c7c9bf0bc7c6809a9074657d2b2eec29f601780fa0b46ed75898c33fa59d1848f01ac

    • SSDEEP

      768:o5TUC+CLfkdNRZ1thFo0ZYUdwSm3L5YWxnJPnt2aNj2amAMPzeYVXShc1r6xeOLQ:oeHNdtbo06QYxZEaBNMzShcZ6xVBFA

    • Mirai

      Mirai is a prevalent Linux malware infecting exposed network devices.

    • Mirai family

    • Contacts a large (23432) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

MITRE ATT&CK Enterprise v15

Tasks