Overview

overview

10

Static

static

7

f3c9566e99...e2.elf

ubuntu-18.04-amd64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    6e10f7141fc5bfe4560cd452ec0f4b2a.bin

  • Size

    21KB

  • Sample

    230502-b1yw1abb7s

  • MD5

    00c78389fa5e08a6303c6014e93d4647

  • SHA1

    e772333bff72e3d449eacfa7697a4fd0d12bbcd3

  • SHA256

    94aee539b699bfc91a247536ef9d7b3d365b56fb9988072fbb1e7538ab2f48b5

  • SHA512

    791bbfb43407e7b8789f707a3ebce65e5618713a3de80cae8a8b527c5827d55175ea82f2f048be97081e4fa9e4b59d6094abcb0933a9a40fed48107b39bfc819

  • SSDEEP

    384:7UKb/I8Qsrz0UXVA6X9T/8ZWLgJhHVGE0n8wI0YNxwTY4DIc2:7UKbBQEX3X9DDIdN6c9

Score
10/10
mirailzrdbotnetlinuxupx

Malware Config

Extracted

Family

mirai

Botnet

LZRD

Targets

    • Target

      f3c9566e9977741079d3cc6f71cc2921be928e17df305bbe0c2d4cea142743e2.elf

    • Size

      21KB

    • MD5

      6e10f7141fc5bfe4560cd452ec0f4b2a

    • SHA1

      eb0da94d39537297ae786191bc405ac476676ed6

    • SHA256

      f3c9566e9977741079d3cc6f71cc2921be928e17df305bbe0c2d4cea142743e2

    • SHA512

      b8d3ac11bc864b3dafd108d42f6a8e93ea268d5554aa67266694937e9e3b85efeb7fcaf38f279a18ba1f8aa1da5f5e96bd180ca362ca3464c41019ec527e64e9

    • SSDEEP

      384:MOcDqRfKUWFH39z+/49ETVQrGLruI8qB+eANnlBQpMr/4oVk+v1Rph:zMkKJFH39CBVQey7qsZoMTTlph

    Score
    10/10
    mirailzrdbotnet

    • Mirai

      Mirai is a prevalent Linux malware infecting exposed network devices.

      botnetmirai

    • Modifies the Watchdog daemon

      Malware like Mirai modify the Watchdog to prevent it restarting an infected system.

    • Writes file to system bin folder

    • Reads runtime system information

      Reads data from /proc virtual filesystem.

    behavioral1

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Hijack Execution Flow

1
T1574

Privilege Escalation

Hijack Execution Flow

1
T1574

Defense Evasion

Impair Defenses

1
T1562

Hijack Execution Flow

1
T1574

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks