General
- Target miron.armv7l.elf
- Size 28KB
- Sample260804-cvv4laen8z
- SHA256 1c8d75b82fa11334ee40d7f09393b2f78396489428b5d8ea105ea3b57ae61484
- MD5 6d351a6b30f1186f817afb36022e7e5c
- SHA1 816fa54f5aa1915013e3370437db720ac70f551d
- SHA512 73d3825608a5cc451124c3c0d5d83753e45283a4be087d435e51ddd7bacce7119a10cae409c6ff96dee7df71479e9e5b92dc525d26168c5815d9021621b5c1a5
- SSDEEP 768:CWKuIJxsVb/7iPgJ+O0RtCK8wv+1Qum7/fPN62eDAg7CE90:CJuisVcgUOmtCK831napciE90
- TLSH T11CD2E053430A3EB3D9081F7B177644BBC27693612C16881753B05E2E07BAD6BDE15987
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Extracted
Family
-
mirai
C2
-
mironlovekitty.duckdns.org
-
mironkittybackupone.duckdns.org
-
mironkittybackupzwei.duckdns.org
Targets
-
- Target miron.armv7l.elf
- Size 28KB
- SHA256 1c8d75b82fa11334ee40d7f09393b2f78396489428b5d8ea105ea3b57ae61484
- MD5 6d351a6b30f1186f817afb36022e7e5c
- SHA1 816fa54f5aa1915013e3370437db720ac70f551d
- SHA512 73d3825608a5cc451124c3c0d5d83753e45283a4be087d435e51ddd7bacce7119a10cae409c6ff96dee7df71479e9e5b92dc525d26168c5815d9021621b5c1a5
- SSDEEP 768:CWKuIJxsVb/7iPgJ+O0RtCK8wv+1Qum7/fPN62eDAg7CE90:CJuisVcgUOmtCK831napciE90
- TLSH T11CD2E053430A3EB3D9081F7B177644BBC27693612C16881753B05E2E07BAD6BDE15987
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Deletes itself
-
Traces itself
Traces itself to prevent debugging attempts