Analysis
-
max time kernel
152s -
max time network
102s -
platform
linux_amd64 -
resource
ubuntu1804-amd64-en-20211208 -
resource tags
-
submitted
21-05-2023 01:06
General
-
Target
b6c075cf7afb6189764c59ed02dfa9b520127adcda048964c0985f451b84dc0a.elf
-
Size
20KB
-
MD5
1b513fea29e61cfc0c855df16f92f152
-
SHA1
f56e5847f98b44b3706576e8270173bfadc5f404
-
SHA256
b6c075cf7afb6189764c59ed02dfa9b520127adcda048964c0985f451b84dc0a
-
SHA512
fb81084faf9dda3f8329ac855bb0bf8da6da31efef62ed634238aded7f4e1405f9c23fc0791347918fd5d4fd33e73dc70e67a823f465c49c6d52f2e567be8936
-
SSDEEP
384:M87Lpj8s/qPui8uZxoIA57RWQjJiEVi+ZksavICMZDA5YqqUTwNIZT1n6Epl9zpj:R98o08kxofBE+ZksatoA5wUT1n6Ep3lv
Score
10/10
Malware Config
Extracted
Family
mirai
Botnet
LZRD
Signatures
-
Mirai
Mirai is a prevalent Linux malware infecting exposed network devices.
-
Modifies Watchdog functionality 1 TTPs 2 IoCs
Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.
-
Writes file to system bin folder 1 TTPs 2 IoCs
-
Reads runtime system information 11 IoCs
Reads data from /proc virtual filesystem.
Processes
-
/tmp/b6c075cf7afb6189764c59ed02dfa9b520127adcda048964c0985f451b84dc0a.elf/tmp/b6c075cf7afb6189764c59ed02dfa9b520127adcda048964c0985f451b84dc0a.elf1⤵