Analysis
-
max time kernel
152s -
max time network
134s -
platform
ubuntu-18.04_amd64 -
resource
ubuntu1804-amd64-20221111-en -
resource tags
-
submitted
30-04-2023 15:02
General
-
Target
b720ec91e848d30018a293a31146e667.elf
-
Size
22KB
-
MD5
b720ec91e848d30018a293a31146e667
-
SHA1
a5a1ecbfad63853864cf7dce070a23c63c9a35aa
-
SHA256
f72dfa341e1a506fc65f3d54ed468f0936821b3ced96b939e4dfa70e72a0b5b0
-
SHA512
c928a54af1a1f8be5c55869b90a14718326900219c4453ce286fec566d4f2183ab84e178bbaf44fa9266a2ba558996dc2d328ce38ba150bfad1775713affda72
-
SSDEEP
384:pDYC95A2rM7RjFrvX2V6H2XJ8LaHYsbX1chiM4HhBJhpExUC03uhHB3QJmRxkmcX:pDZ5Dw7RjFjcU+O24sDS4HhrhpEguX34
Score
10/10
Malware Config
Extracted
Family
mirai
Botnet
LZRD
Signatures
-
Mirai
Mirai is a prevalent Linux malware infecting exposed network devices.
-
Modifies the Watchdog daemon 1 TTPs
Malware like Mirai modify the Watchdog to prevent it restarting an infected system.
-
Writes file to system bin folder 1 TTPs 2 IoCs
-
Reads runtime system information 14 IoCs
Reads data from /proc virtual filesystem.
Processes
-
/tmp/b720ec91e848d30018a293a31146e667.elf/tmp/b720ec91e848d30018a293a31146e667.elf1⤵