Analysis
-
max time kernel
150s -
max time network
147s -
platform
debian-9_mipsel -
resource
debian9-mipsel-20221111-en -
resource tags
arch:mipselimage:debian9-mipsel-20221111-enkernel:4.9.0-13-4kc-maltalocale:en-usos:debian-9-mipselsystem -
submitted
17-05-2023 06:19
General
-
Target
07ed6b95a27365489e62e0a7b1ccebdc.elf
-
Size
24KB
-
MD5
07ed6b95a27365489e62e0a7b1ccebdc
-
SHA1
4899527e97855ace6859934113fb5146733b48e8
-
SHA256
4ca3f25d2820798aba9d7d7c19aec54277c5a61bca3fc0c348939ec7ffb6e86d
-
SHA512
8911b6eab8465b9cfee78f16c2d439c21c210e22407f3554044ce287796736c21f672ad385048913782919fb913dc8bb1978cfef5eba3de49f6b467c4cc6517b
-
SSDEEP
768:obrQlS07dEv0UXqUhvQE+CXQKMQKCXBpaZqSWvm:4QlS07FUXqIYSXQKquuqu
Malware Config
Extracted
Family
mirai
Botnet
LZRD
Signatures
-
Modifies the Watchdog daemon 1 TTPs
Malware like Mirai modify the Watchdog to prevent it restarting an infected system.
-
Writes file to system bin folder 1 TTPs 2 IoCs
Processes:
description ioc File opened for modification /sbin/watchdog File opened for modification /bin/watchdog
Processes
Network
MITRE ATT&CK Matrix ATT&CK v6
Replay Monitor
Loading Replay Monitor...
Downloads
-
memory/336-1-0x00400000-0x00452a58-memory.dmp