General

  • Target

    u.elf

  • Size

    98KB

  • Sample

    250309-nlmlmszzfz

  • MD5

    3eea77f7c9d0d77c405d684aa1e98d97

  • SHA1

    528ac08a8ed9252217476deda1a5fcf39e361a87

  • SHA256

    4889a50a764cd1bcfdf3ad77393910405e3dd682b9ba20eff8792592e9eabd12

  • SHA512

    aad66c3984dfe55a44cb90802f0f993f0bc2676ae22bb0c1310e6da7a8d95dfa302dae501daef2a911b8b5b4e1e2e8c00cc3e1f450a0e95510dfc723eb5f9c05

  • SSDEEP

    3072:ctH/Tlw/1J12lc5/v0MDMj827Ydza3/r3c3B0:YH/C/1Hd3Mj827Ydza3/YB0

Score
10/10

Malware Config

Extracted

Family

mirai

Botnet

APEP

Targets

    • Target

      u.elf

    • Size

      98KB

    • MD5

      3eea77f7c9d0d77c405d684aa1e98d97

    • SHA1

      528ac08a8ed9252217476deda1a5fcf39e361a87

    • SHA256

      4889a50a764cd1bcfdf3ad77393910405e3dd682b9ba20eff8792592e9eabd12

    • SHA512

      aad66c3984dfe55a44cb90802f0f993f0bc2676ae22bb0c1310e6da7a8d95dfa302dae501daef2a911b8b5b4e1e2e8c00cc3e1f450a0e95510dfc723eb5f9c05

    • SSDEEP

      3072:ctH/Tlw/1J12lc5/v0MDMj827Ydza3/r3c3B0:YH/C/1Hd3Mj827Ydza3/YB0

    Score
    9/10
    • Contacts a large (176348) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

MITRE ATT&CK Enterprise v15

Tasks