Click to jump to signature section
Source: tAuyaQxoyW.elf | ReversingLabs: Detection: 52% |
Source: global traffic | TCP traffic: 192.168.2.13:40436 -> 93.123.85.253:3074 |
Source: unknown | TCP traffic detected without corresponding DNS query: 93.123.85.253 |
Source: unknown | TCP traffic detected without corresponding DNS query: 93.123.85.253 |
Source: unknown | TCP traffic detected without corresponding DNS query: 93.123.85.253 |
Source: unknown | TCP traffic detected without corresponding DNS query: 93.123.85.253 |
Source: unknown | TCP traffic detected without corresponding DNS query: 93.123.85.253 |
Source: unknown | TCP traffic detected without corresponding DNS query: 93.123.85.253 |
Source: unknown | TCP traffic detected without corresponding DNS query: 93.123.85.253 |
Source: unknown | TCP traffic detected without corresponding DNS query: 93.123.85.253 |
Source: unknown | TCP traffic detected without corresponding DNS query: 93.123.85.253 |
Source: unknown | UDP traffic detected without corresponding DNS query: 1.1.1.1 |
Source: unknown | UDP traffic detected without corresponding DNS query: 1.1.1.1 |
Source: global traffic | DNS traffic detected: DNS query: daisy.ubuntu.com |
Source: tAuyaQxoyW.elf, type: SAMPLE | Matched rule: Linux_Trojan_Mirai_389ee3e9 Author: unknown |
Source: tAuyaQxoyW.elf, type: SAMPLE | Matched rule: Linux_Trojan_Mirai_cc93863b Author: unknown |
Source: tAuyaQxoyW.elf, type: SAMPLE | Matched rule: Linux_Trojan_Mirai_8aa7b5d3 Author: unknown |
Source: 5430.1.0000000008048000.0000000008051000.r-x.sdmp, type: MEMORY | Matched rule: Linux_Trojan_Mirai_389ee3e9 Author: unknown |
Source: 5430.1.0000000008048000.0000000008051000.r-x.sdmp, type: MEMORY | Matched rule: Linux_Trojan_Mirai_cc93863b Author: unknown |
Source: 5430.1.0000000008048000.0000000008051000.r-x.sdmp, type: MEMORY | Matched rule: Linux_Trojan_Mirai_8aa7b5d3 Author: unknown |
Source: 5431.1.0000000008048000.0000000008051000.r-x.sdmp, type: MEMORY | Matched rule: Linux_Trojan_Mirai_389ee3e9 Author: unknown |
Source: 5431.1.0000000008048000.0000000008051000.r-x.sdmp, type: MEMORY | Matched rule: Linux_Trojan_Mirai_cc93863b Author: unknown |
Source: 5431.1.0000000008048000.0000000008051000.r-x.sdmp, type: MEMORY | Matched rule: Linux_Trojan_Mirai_8aa7b5d3 Author: unknown |
Source: ELF static info symbol of initial sample | .symtab present: no |
Source: tAuyaQxoyW.elf, type: SAMPLE | Matched rule: Linux_Trojan_Mirai_389ee3e9 reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 59f2359dc1f41d385d639d157b4cd9fc73d76d8abb7cc09d47632bb4c9a39e6e, id = 389ee3e9-70c1-4c93-a999-292cf6ff1652, last_modified = 2022-01-26 |
Source: tAuyaQxoyW.elf, type: SAMPLE | Matched rule: Linux_Trojan_Mirai_cc93863b reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = f3ecd30f0b511a8e92cfa642409d559e7612c3f57a1659ca46c77aca809a00ac, id = cc93863b-1050-40ba-9d02-5ec9ce6a3a28, last_modified = 2022-01-26 |
Source: tAuyaQxoyW.elf, type: SAMPLE | Matched rule: Linux_Trojan_Mirai_8aa7b5d3 reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 02a2c18c362df4b1fceb33f3b605586514ba9a00c7afedf71c04fa54d8146444, id = 8aa7b5d3-e1eb-4b55-b36a-0d3a242c06e9, last_modified = 2022-01-26 |
Source: 5430.1.0000000008048000.0000000008051000.r-x.sdmp, type: MEMORY | Matched rule: Linux_Trojan_Mirai_389ee3e9 reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 59f2359dc1f41d385d639d157b4cd9fc73d76d8abb7cc09d47632bb4c9a39e6e, id = 389ee3e9-70c1-4c93-a999-292cf6ff1652, last_modified = 2022-01-26 |
Source: 5430.1.0000000008048000.0000000008051000.r-x.sdmp, type: MEMORY | Matched rule: Linux_Trojan_Mirai_cc93863b reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = f3ecd30f0b511a8e92cfa642409d559e7612c3f57a1659ca46c77aca809a00ac, id = cc93863b-1050-40ba-9d02-5ec9ce6a3a28, last_modified = 2022-01-26 |
Source: 5430.1.0000000008048000.0000000008051000.r-x.sdmp, type: MEMORY | Matched rule: Linux_Trojan_Mirai_8aa7b5d3 reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 02a2c18c362df4b1fceb33f3b605586514ba9a00c7afedf71c04fa54d8146444, id = 8aa7b5d3-e1eb-4b55-b36a-0d3a242c06e9, last_modified = 2022-01-26 |
Source: 5431.1.0000000008048000.0000000008051000.r-x.sdmp, type: MEMORY | Matched rule: Linux_Trojan_Mirai_389ee3e9 reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 59f2359dc1f41d385d639d157b4cd9fc73d76d8abb7cc09d47632bb4c9a39e6e, id = 389ee3e9-70c1-4c93-a999-292cf6ff1652, last_modified = 2022-01-26 |
Source: 5431.1.0000000008048000.0000000008051000.r-x.sdmp, type: MEMORY | Matched rule: Linux_Trojan_Mirai_cc93863b reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = f3ecd30f0b511a8e92cfa642409d559e7612c3f57a1659ca46c77aca809a00ac, id = cc93863b-1050-40ba-9d02-5ec9ce6a3a28, last_modified = 2022-01-26 |
Source: 5431.1.0000000008048000.0000000008051000.r-x.sdmp, type: MEMORY | Matched rule: Linux_Trojan_Mirai_8aa7b5d3 reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 02a2c18c362df4b1fceb33f3b605586514ba9a00c7afedf71c04fa54d8146444, id = 8aa7b5d3-e1eb-4b55-b36a-0d3a242c06e9, last_modified = 2022-01-26 |
Source: classification engine | Classification label: mal64.spre.linELF@0/0@2/0 |