General

  • Target

    f374dcafa9acc2910cdd63dee45087dd5bd23602d927dde6ee9652d06ea5ec7b.elf

  • Size

    114KB

  • Sample

    250308-s1qztsyry3

  • MD5

    82919c063756155bab5d734f380b6351

  • SHA1

    f30a48ebbf2572d1fef95fe3990c565836dbf7ad

  • SHA256

    f374dcafa9acc2910cdd63dee45087dd5bd23602d927dde6ee9652d06ea5ec7b

  • SHA512

    9be946b67278f10e19a998f6a6f421cceb685b05c365c2599eec65cd7461b8932dfd9269ddb4853864cf33365eacb0962395c4fbae9ec42296f7566576443291

  • SSDEEP

    3072:H/Axmw2Z9daAMN8CSR/vW2AN1KiwbZnX3R:H/Em5DLZvW26ZwRXh

Malware Config

Extracted

Family

mirai

Botnet

MIRAI

C2

hjfdjkahfkejw.chickenkiller.com

Targets

    • Target

      f374dcafa9acc2910cdd63dee45087dd5bd23602d927dde6ee9652d06ea5ec7b.elf

    • Size

      114KB

    • MD5

      82919c063756155bab5d734f380b6351

    • SHA1

      f30a48ebbf2572d1fef95fe3990c565836dbf7ad

    • SHA256

      f374dcafa9acc2910cdd63dee45087dd5bd23602d927dde6ee9652d06ea5ec7b

    • SHA512

      9be946b67278f10e19a998f6a6f421cceb685b05c365c2599eec65cd7461b8932dfd9269ddb4853864cf33365eacb0962395c4fbae9ec42296f7566576443291

    • SSDEEP

      3072:H/Axmw2Z9daAMN8CSR/vW2AN1KiwbZnX3R:H/Em5DLZvW26ZwRXh

    • Contacts a large (155221) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

    • File and Directory Permissions Modification

      Adversaries may modify file or directory permissions to evade defenses.

MITRE ATT&CK Enterprise v15

Tasks