Overview

overview

10

Static

static

7

6e10f7141f...2a.elf

ubuntu-18.04-amd64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    6e10f7141fc5bfe4560cd452ec0f4b2a.elf

  • Size

    21KB

  • Sample

    230430-r7kwqabg7z

  • MD5

    6e10f7141fc5bfe4560cd452ec0f4b2a

  • SHA1

    eb0da94d39537297ae786191bc405ac476676ed6

  • SHA256

    f3c9566e9977741079d3cc6f71cc2921be928e17df305bbe0c2d4cea142743e2

  • SHA512

    b8d3ac11bc864b3dafd108d42f6a8e93ea268d5554aa67266694937e9e3b85efeb7fcaf38f279a18ba1f8aa1da5f5e96bd180ca362ca3464c41019ec527e64e9

  • SSDEEP

    384:MOcDqRfKUWFH39z+/49ETVQrGLruI8qB+eANnlBQpMr/4oVk+v1Rph:zMkKJFH39CBVQey7qsZoMTTlph

Score
10/10
mirailzrdbotnetlinuxupx

Malware Config

Extracted

Family

mirai

Botnet

LZRD

Targets

    • Target

      6e10f7141fc5bfe4560cd452ec0f4b2a.elf

    • Size

      21KB

    • MD5

      6e10f7141fc5bfe4560cd452ec0f4b2a

    • SHA1

      eb0da94d39537297ae786191bc405ac476676ed6

    • SHA256

      f3c9566e9977741079d3cc6f71cc2921be928e17df305bbe0c2d4cea142743e2

    • SHA512

      b8d3ac11bc864b3dafd108d42f6a8e93ea268d5554aa67266694937e9e3b85efeb7fcaf38f279a18ba1f8aa1da5f5e96bd180ca362ca3464c41019ec527e64e9

    • SSDEEP

      384:MOcDqRfKUWFH39z+/49ETVQrGLruI8qB+eANnlBQpMr/4oVk+v1Rph:zMkKJFH39CBVQey7qsZoMTTlph

    Score
    10/10
    mirailzrdbotnet

    • Mirai

      Mirai is a prevalent Linux malware infecting exposed network devices.

      botnetmirai

    • Modifies the Watchdog daemon

      Malware like Mirai modify the Watchdog to prevent it restarting an infected system.

    • Writes file to system bin folder

    • Reads runtime system information

      Reads data from /proc virtual filesystem.

    behavioral1

MITRE ATT&CK Enterprise v6

Tasks