Analysis
-
max time kernel
154s -
max time network
153s -
platform
linux_amd64 -
resource
ubuntu1804-amd64-en-20211208 -
resource tags
arch:amd64arch:i386image:ubuntu1804-amd64-en-20211208kernel:4.15.0-161-genericlocale:en-usos:ubuntu-18.04-amd64system -
submitted
01-05-2023 01:17
General
-
Target
6f5d9a0573a30cac039f2da9a76c2b56408097450beccbb1c64eb28f036af995.elf
-
Size
22KB
-
MD5
30b9b78b594c45f9de35397d40225257
-
SHA1
7368597797625da219d445d678485c6b0417c1c3
-
SHA256
6f5d9a0573a30cac039f2da9a76c2b56408097450beccbb1c64eb28f036af995
-
SHA512
fd45b9add76e10674a2264e837d9aad79dad46d2a41ecc7e9c945aa70d1a2de0ab4816c63d6496860899d4a0e43d483ff309793cf7ffb55f730201a7dd042eee
-
SSDEEP
384:3ZRb4hXnbGjJHxtbHHg1A+giifPCHJjWkiaIuIejsCPzUoMPotiBcDeQqTcliFqG:3ZRUbGjJrM1U1CH5BItY4oMtb8sF
Malware Config
Extracted
Family
mirai
Botnet
LZRD
Signatures
-
Reads runtime system information 7 IoCs
Reads data from /proc virtual filesystem.
Processes:
description ioc File opened for reading /proc/541/cmdline File opened for reading /proc/570/cmdline File opened for reading /proc/571/cmdline File opened for reading /proc/572/cmdline File opened for reading /proc/573/cmdline File opened for reading /proc/578/cmdline File opened for reading /proc/422/cmdline
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
memory/575-1-0x0000000000400000-0x000000000050de48-memory.dmp