General

  • Target
    debug.dbg
  • Size 206KB
  • Sample260813-plashsytfx
  • SHA256 3ee840bc79a034e38e1f4d42a19fbdc7cf50bea0581bbcdbd92149b6009fbf90
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Extracted

Family
  • mirai

Botnet
  • DEMONS

C2
  • manbipll.duckdns.org

Targets

    • Target
      debug.dbg
    • Size 206KB
    • SHA256 3ee840bc79a034e38e1f4d42a19fbdc7cf50bea0581bbcdbd92149b6009fbf90
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    7/10
    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    • Writes file to system bin folder

MITRE ATT&CK Enterprise v16

Tasks