General

  • Target

    7581867fa4cfd3edfd252fcd9df0ed0511453b04e832b48564137f175f36c93a

  • Size

    689KB

  • MD5

    de0e07c800130da85c5301c765f40230

  • SHA1

    06bde6e7b4a24ffb72c826296250b18f45bc0cc4

  • SHA256

    7581867fa4cfd3edfd252fcd9df0ed0511453b04e832b48564137f175f36c93a

  • SHA512

    2483903e5d8b8be8fd5e9c471dcadd062549d10273605d1a61d004ded4185bde933b2f0f8711c7f489afe56e89bce9e78727ef797e7fe43a7b15f4a92e21bad9

  • SSDEEP

    12288:yV8m2CAL7AcqOrQNneQ6XrKpquk0odNDrxd0X9MjgdO2ZeGX6zhN3JezltBxe:yynCAXaOktAXG0uxkNpd0X9MkO2Zel37

Malware Config

Extracted

Family

gafgyt

C2

159.65.227.17:54

185.244.25.87:82180

86.105.52.202:23

203.248.197.10:22

67.205.154.43:23

Extracted

Family

mirai

Botnet

SORA

Extracted

Family

mirai

Botnet

LZRD

Extracted

Family

mirai

Botnet

JOSHO

Extracted

Family

mirai

Botnet

MIRAI

C2

rrr.shenron.pw

Signatures

  • Detected Gafgyt variant 6 IoCs
  • Gafgyt family
  • Mirai family
  • UPX packed file 4 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

Files

  • 7581867fa4cfd3edfd252fcd9df0ed0511453b04e832b48564137f175f36c93a
    .zip
  • 病毒样本/00e06596da8d703779bb39d9e08fedee
    .elf linux sparc
  • 病毒样本/00f87a46e10716d679e96a30cff11a37
    .elf linux x64
  • 病毒样本/0a38d9eca296fa1935f82dabb41a31a5
    .elf linux x86
  • 病毒样本/0a39ca7cf634801eec27eb2d223d4ec8
    .elf linux
  • 病毒样本/0a7b0aabb6a61c26f0509b676dabfedb
    .elf linux arm
  • 病毒样本/26a14f8a41b6e3b3f685d529e94b233f
    .elf linux mipsbe
  • 病毒样本/26dfd5812c878dab3dea8c7666026956
    .elf linux arm
  • 病毒样本/27e04e3e0427e779ee43db42783abbaf
    .elf linux arm
  • 病毒样本/28aaedd279bb9c1d92a7b9adb541093c
    .elf linux ppc
  • 病毒样本/28b40aeda006c7db6163322527c23ffa
    .elf linux x86
  • 病毒样本/29f7bb5c960036be3c3d945d23ef7fc4
    .elf linux arm
  • 病毒样本/32a72a1cc99feb90e77c5f7616f0acd0
    .elf linux arm
  • 病毒样本/32cba3f918e9c992b93177a2d204540a
    .elf linux x86
  • 病毒样本/34c537210dbdbf28f4694142490b86b3
    .elf linux x86
  • 病毒样本/34e64e853d2bdb8908214048b12262e8
    .elf linux arm
  • 病毒样本/35bf9d160efafe2af0d99b054df9af71
    .elf linux x86
  • 病毒样本/35c568784f18bb908bfc37d35ccfa44d
    .elf linux x64
  • 病毒样本/36b6e50ce03c032e59af7b6caa276606
    .elf linux arm
  • 病毒样本/36c1760bf0b828ea66a78cae9f5d74b3
    .elf linux ppc
  • 病毒样本/37ea67b2c8927cedd2c59549aa6c88db
    .elf linux arm