Overview

overview

10

Static

static

7

da9c35337e...1d.elf

debian-9-armhf

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    1614173ac0287d645cd6eb1851c0d840.bin

  • Size

    35KB

  • Sample

    230510-bgl34afe5z

  • MD5

    d67f1397cfcd54e1dd31ba1c0b111f74

  • SHA1

    37556cb8e5ced014592f323411cc2df22e566ed9

  • SHA256

    627f130c246679df8e3041bd891ca63b20f07d861f30991e000b78d1da1189a4

  • SHA512

    ab82769ac863b1e923d4a8662a5b5b3733e0f0d065ad6f4f4afefe3ee0267ca251f76aa2f6eaea9df77da8c916afaf3619934490871b3d8962c39cafcd08f7b5

  • SSDEEP

    768:AibSxq0b18a1ISTWogvoUm+JfKuZBKDE+mP5dm1lLpwJBvjSl:AibSo0J82lpgA/yIER5dm1lLCJBrSl

Score
10/10
miraibotnetbotnetupx

Malware Config

Extracted

Family

mirai

Botnet

BOTNET

Targets

    • Target

      da9c35337e4411d969573ef09c6d7bfb31746ccb541f8672077c3b2f9e2de71d.elf

    • Size

      36KB

    • MD5

      1614173ac0287d645cd6eb1851c0d840

    • SHA1

      20f36a97332e66df06574802956e4b361d2c4f50

    • SHA256

      da9c35337e4411d969573ef09c6d7bfb31746ccb541f8672077c3b2f9e2de71d

    • SHA512

      d85bbffb175cb3dd54c8453ad87d7b4492aa2408f91dcfcdac9dd415bacf66d68897e5bf75b29f502a3f39d8afdd0d78a08b7b396d48712baa2a1aeea4e0e1a1

    • SSDEEP

      768:kaZaZqJH0UNLIfJzQJi372HsOtyHpJddkW7JzmLYS9q3UELe:ka8ZqK2kfJzQA37UsEiz6wLe

    Score
    10/10
    miraibotnetbotnet

    • Mirai

      Mirai is a prevalent Linux malware infecting exposed network devices.

      botnetmirai

    • Modifies the Watchdog daemon

      Malware like Mirai modify the Watchdog to prevent it restarting an infected system.

    • Changes its process name

    • Reads runtime system information

      Reads data from /proc virtual filesystem.

    behavioral1

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Impair Defenses

1
T1562

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks