General

  • Target

    zyxel.elf

  • Size

    149KB

  • Sample

    250309-naxx8szyhv

  • MD5

    6324ba37c929071f8a3c65d7bae2cfd3

  • SHA1

    f89a463328df433b597b53267f75b2f742d647a1

  • SHA256

    18ec419326c72cad270da262d178dd3ee8a2c88d615b254cd838262a89a2b961

  • SHA512

    cd05a6d286bc4ebab1eb3ab4e6f047e036043e875a3af846b95245ac46248eba61336492ce6df794fa6f08e1fa76581a2bf67f9af35f64bbfbe1c0234deeae92

  • SSDEEP

    3072:8pTHcZwn2J+wVJVdFFH+DsEncLTdOoRrWwduHuDM/9FTsHQhoR:aTHcZw2oQdjGsEncLTkoRDduH6M/9FhE

Score
10/10

Malware Config

Extracted

Family

mirai

Botnet

APEP

Targets

    • Target

      zyxel.elf

    • Size

      149KB

    • MD5

      6324ba37c929071f8a3c65d7bae2cfd3

    • SHA1

      f89a463328df433b597b53267f75b2f742d647a1

    • SHA256

      18ec419326c72cad270da262d178dd3ee8a2c88d615b254cd838262a89a2b961

    • SHA512

      cd05a6d286bc4ebab1eb3ab4e6f047e036043e875a3af846b95245ac46248eba61336492ce6df794fa6f08e1fa76581a2bf67f9af35f64bbfbe1c0234deeae92

    • SSDEEP

      3072:8pTHcZwn2J+wVJVdFFH+DsEncLTdOoRrWwduHuDM/9FTsHQhoR:aTHcZw2oQdjGsEncLTkoRDduH6M/9FhE

    Score
    9/10
    • Contacts a large (210164) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

MITRE ATT&CK Enterprise v15

Tasks