Overview

overview

10

Static

static

7

c6ca07a951...b7.elf

ubuntu-18.04-amd64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    c6ca07a951ecfc870b92c466c86431b7.elf

  • Size

    20KB

  • Sample

    230514-c9aq7sad87

  • MD5

    c6ca07a951ecfc870b92c466c86431b7

  • SHA1

    b8d8201e5a1934cee0daea7de8c067e4a67c7c32

  • SHA256

    b03e4b5fc01f39df8694d21b3df5a5cb8f4ab80190d3575d0739f5c4cce098b7

  • SHA512

    89e360adb327b97e13ddb56721626488423cf5a97ad6301da724a63ed49e08186d3f2bc52498e01fb72afeb73defdb213ab67fbe667164d59b0ef59f31913a54

  • SSDEEP

    384:M0hLpj8s/qPui8uZxoIA57RWQjJiEVi+ZkXaQNAr8vcoBAvP+qNV+KLebRtnISyW:T98o08kxofBE+ZkXaT47C2EpitkW

Score
10/10
mirailzrdbotnetlinuxupx

Malware Config

Extracted

Family

mirai

Botnet

LZRD

Targets

    • Target

      c6ca07a951ecfc870b92c466c86431b7.elf

    • Size

      20KB

    • MD5

      c6ca07a951ecfc870b92c466c86431b7

    • SHA1

      b8d8201e5a1934cee0daea7de8c067e4a67c7c32

    • SHA256

      b03e4b5fc01f39df8694d21b3df5a5cb8f4ab80190d3575d0739f5c4cce098b7

    • SHA512

      89e360adb327b97e13ddb56721626488423cf5a97ad6301da724a63ed49e08186d3f2bc52498e01fb72afeb73defdb213ab67fbe667164d59b0ef59f31913a54

    • SSDEEP

      384:M0hLpj8s/qPui8uZxoIA57RWQjJiEVi+ZkXaQNAr8vcoBAvP+qNV+KLebRtnISyW:T98o08kxofBE+ZkXaT47C2EpitkW

    Score
    10/10
    mirailzrdbotnet

    • Mirai

      Mirai is a prevalent Linux malware infecting exposed network devices.

      botnetmirai

    • Modifies the Watchdog daemon

      Malware like Mirai modify the Watchdog to prevent it restarting an infected system.

    • Writes file to system bin folder

    • Reads runtime system information

      Reads data from /proc virtual filesystem.

    behavioral1

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Hijack Execution Flow

1
T1574

Privilege Escalation

Hijack Execution Flow

1
T1574

Defense Evasion

Impair Defenses

1
T1562

Hijack Execution Flow

1
T1574

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks