General

  • Target

    u.elf

  • Size

    32KB

  • Sample

    250309-naxmgazyhs

  • MD5

    4ff586faf489f7a2fc1c62eb772793be

  • SHA1

    156e6cf90b517b1752babef075f2186f6cfa964b

  • SHA256

    253fbabcb4220473e8e6bee85edc1bae835e7a186a4ef223de32b5d41d5736ce

  • SHA512

    6974882489bdca6393c7fe2616b5826f06bd8599992c9cc5ab45fcce1a1d2f9bf6c72ccb1d1cd291d3b742e4444583bfb83ad5b6594eab24c3358f56f22e9f8e

  • SSDEEP

    768:UQE0R41Re844tDE07xrT9ftDeJVTsRnUay8htgjAAJgGlzDpUYsB:UQ6142i07xe9V9lVqYq

Malware Config

Extracted

Family

mirai

Botnet

APEP

Targets

    • Target

      u.elf

    • Size

      32KB

    • MD5

      4ff586faf489f7a2fc1c62eb772793be

    • SHA1

      156e6cf90b517b1752babef075f2186f6cfa964b

    • SHA256

      253fbabcb4220473e8e6bee85edc1bae835e7a186a4ef223de32b5d41d5736ce

    • SHA512

      6974882489bdca6393c7fe2616b5826f06bd8599992c9cc5ab45fcce1a1d2f9bf6c72ccb1d1cd291d3b742e4444583bfb83ad5b6594eab24c3358f56f22e9f8e

    • SSDEEP

      768:UQE0R41Re844tDE07xrT9ftDeJVTsRnUay8htgjAAJgGlzDpUYsB:UQ6142i07xe9V9lVqYq

    • Mirai

      Mirai is a prevalent Linux malware infecting exposed network devices.

    • Mirai family

    • Contacts a large (213231) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

MITRE ATT&CK Enterprise v15

Tasks