General
- Target nerv.mpsl
- Size 138KB
- Sample260720-plg7lact51
- SHA256 9e0906c0afddcf623c51db58880b8e0958cfd4ca532082e2030cccb89ef3b532
- MD5 6d88fcf4982185dd44674dbd7866b8c1
- SHA1 4487d896e98b3c0e89870227ad77279c3d97888a
- SHA512 05996883f8149b40006607559e0f3c8c6e1f3113e0d78232b003dfcfd8daeb886694d90cf1afca83795a13892c4c1ae7e39f3d8bede9446057c4a674b969f645
- SSDEEP 3072:NXj17Jo82I/GFSiPep063GM51hERGjPrjz:NXFLOPX8rxERmfz
- TLSH T142D30816FB210EFBDC9BCD374AE91705258C651A22AE7F367934C928F44B15B16E3C60
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Extracted
Family
-
mirai
C2
-
servers.loseyourip.com
-
89.190.156.145
Targets
-
- Target nerv.mpsl
- Size 138KB
- SHA256 9e0906c0afddcf623c51db58880b8e0958cfd4ca532082e2030cccb89ef3b532
- MD5 6d88fcf4982185dd44674dbd7866b8c1
- SHA1 4487d896e98b3c0e89870227ad77279c3d97888a
- SHA512 05996883f8149b40006607559e0f3c8c6e1f3113e0d78232b003dfcfd8daeb886694d90cf1afca83795a13892c4c1ae7e39f3d8bede9446057c4a674b969f645
- SSDEEP 3072:NXj17Jo82I/GFSiPep063GM51hERGjPrjz:NXFLOPX8rxERmfz
- TLSH T142D30816FB210EFBDC9BCD374AE91705258C651A22AE7F367934C928F44B15B16E3C60
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Traces itself
Traces itself to prevent debugging attempts