General

  • Target
    mpsl.elf
  • Size 126KB
  • Sample260901-dgaq6ssbra
  • SHA256 d060ee9b0fbd1f2c3067ed1ea0c105deaa1985e78a04fc89b599841433d52b9c
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Extracted

Family
  • mirai

Botnet
  • LZRD

C2
  • 8.8.8.8

  • 8.8.4.4

  • 208.67.222.222

  • 208.67.220.220

  • 1.1.1.1

  • 205.244.167.84

  • 5.175.222.230

Targets

    • Target
      mpsl.elf
    • Size 126KB
    • SHA256 d060ee9b0fbd1f2c3067ed1ea0c105deaa1985e78a04fc89b599841433d52b9c
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    6/10
    • Enumerates active TCP sockets

      Gets active TCP sockets from /proc virtual filesystem.

    • Enumerates running processes

      Discovers information about currently running processes on the system

MITRE ATT&CK Enterprise v16

Tasks