Overview

overview

10

Static

static

7

b06fd6af7b...1e.elf

ubuntu-18.04-amd64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    14970f1d712b7530fef3890e29dd1446.bin

  • Size

    20KB

  • Sample

    230502-bc5dwahc33

  • MD5

    3e351ed185409896b21d0f6ae5651a94

  • SHA1

    ef36a641d1dde189bddbf1466d200a7d082f8308

  • SHA256

    ad123057654879770ec9fdd76c90072c3627e412e473731c5edd061049028bc7

  • SHA512

    73e529af5099a7fd33956c6ede22d926ab31b6157b0146b65c97fa805c5492f7c330693b75308affd36b2668e9de6e4a423c73621ff3a30d48aa547c0e90dd5f

  • SSDEEP

    384:IOafqlgQyUVQHxyevhpFgY2yb2iABfafzo7UVWp5k1CMFtfb:6EguV6xX5gY2M2lBfU8Uc5k1fFtb

Score
10/10
mirailzrdbotnetlinuxupx

Malware Config

Extracted

Family

mirai

Botnet

LZRD

Targets

    • Target

      b06fd6af7bfab631c101e53c3bcf89b09a6e52f3203732c550ead9ae4795d31e.elf

    • Size

      20KB

    • MD5

      14970f1d712b7530fef3890e29dd1446

    • SHA1

      1e8c028ddcdaea946152c4642290b470f4bb5c22

    • SHA256

      b06fd6af7bfab631c101e53c3bcf89b09a6e52f3203732c550ead9ae4795d31e

    • SHA512

      8449165667053788f790dab785a580e6eb849c345a7a48c357b50ef9a619fb04d4c3bcf5dee9830aed99dd5a9c730c3da8fc853174ee08fbcbdff2e6bdb0901a

    • SSDEEP

      384:Mg9Lpj8s/qPui8uZxoIA57RWQjJiEVi+ZkXadmTb+502F2vwA9dWuMW21bAK1oTH:798o08kxofBE+ZkXaITbp2F2TWul0c5b

    Score
    10/10
    mirailzrdbotnet

    • Mirai

      Mirai is a prevalent Linux malware infecting exposed network devices.

      botnetmirai

    • Modifies the Watchdog daemon

      Malware like Mirai modify the Watchdog to prevent it restarting an infected system.

    • Writes file to system bin folder

    • Reads runtime system information

      Reads data from /proc virtual filesystem.

    behavioral1

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Hijack Execution Flow

1
T1574

Privilege Escalation

Hijack Execution Flow

1
T1574

Defense Evasion

Impair Defenses

1
T1562

Hijack Execution Flow

1
T1574

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks