Overview

overview

10

Static

static

7

b720ec91e8...67.elf

ubuntu-18.04-amd64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    b720ec91e848d30018a293a31146e667.elf

  • Size

    22KB

  • Sample

    230430-sefa7saa75

  • MD5

    b720ec91e848d30018a293a31146e667

  • SHA1

    a5a1ecbfad63853864cf7dce070a23c63c9a35aa

  • SHA256

    f72dfa341e1a506fc65f3d54ed468f0936821b3ced96b939e4dfa70e72a0b5b0

  • SHA512

    c928a54af1a1f8be5c55869b90a14718326900219c4453ce286fec566d4f2183ab84e178bbaf44fa9266a2ba558996dc2d328ce38ba150bfad1775713affda72

  • SSDEEP

    384:pDYC95A2rM7RjFrvX2V6H2XJ8LaHYsbX1chiM4HhBJhpExUC03uhHB3QJmRxkmcX:pDZ5Dw7RjFjcU+O24sDS4HhrhpEguX34

Score
10/10
mirailzrdbotnetlinuxupx

Malware Config

Extracted

Family

mirai

Botnet

LZRD

Targets

    • Target

      b720ec91e848d30018a293a31146e667.elf

    • Size

      22KB

    • MD5

      b720ec91e848d30018a293a31146e667

    • SHA1

      a5a1ecbfad63853864cf7dce070a23c63c9a35aa

    • SHA256

      f72dfa341e1a506fc65f3d54ed468f0936821b3ced96b939e4dfa70e72a0b5b0

    • SHA512

      c928a54af1a1f8be5c55869b90a14718326900219c4453ce286fec566d4f2183ab84e178bbaf44fa9266a2ba558996dc2d328ce38ba150bfad1775713affda72

    • SSDEEP

      384:pDYC95A2rM7RjFrvX2V6H2XJ8LaHYsbX1chiM4HhBJhpExUC03uhHB3QJmRxkmcX:pDZ5Dw7RjFjcU+O24sDS4HhrhpEguX34

    Score
    10/10
    mirailzrdbotnet

    • Mirai

      Mirai is a prevalent Linux malware infecting exposed network devices.

      botnetmirai

    • Modifies the Watchdog daemon

      Malware like Mirai modify the Watchdog to prevent it restarting an infected system.

    • Writes file to system bin folder

    • Reads runtime system information

      Reads data from /proc virtual filesystem.

    behavioral1

MITRE ATT&CK Enterprise v6

Tasks