Analysis
-
max time kernel
151s -
max time network
152s -
platform
linux_mipsel -
resource
debian9-mipsel-en-20211208 -
resource tags
-
submitted
31-05-2023 01:31
General
-
Target
9f96a05683072a991a6a681503e3acdab83206713f4500b5fba60f69aef20174.elf
-
Size
24KB
-
MD5
86b65f5f4e56ce09cafae8be5f22583e
-
SHA1
b6b57514452caa29f35c1454e7c63f708ca18391
-
SHA256
9f96a05683072a991a6a681503e3acdab83206713f4500b5fba60f69aef20174
-
SHA512
92c90b36a6c54ddb9aaa90f33fc7cd7a84c67aeb0f4ccea6d89138c97e2308ed20e82999b805a8c4eb347ead70472a6d91aaf46c123f3530424b3edc25ff5cc2
-
SSDEEP
768:kLgJwgaM3cCK1oPTZQwG+Xx5EjBCIgY7unQWF:kq4fYtrXCcnn
Score
10/10
Malware Config
Extracted
Family
mirai
Botnet
LZRD
Signatures
-
Mirai
Mirai is a prevalent Linux malware infecting exposed network devices.
-
Modifies Watchdog functionality 1 TTPs 2 IoCs
Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.
-
Writes file to system bin folder 1 TTPs 2 IoCs
-
Reads runtime system information 2 IoCs
Reads data from /proc virtual filesystem.
Processes
-
/tmp/9f96a05683072a991a6a681503e3acdab83206713f4500b5fba60f69aef20174.elf/tmp/9f96a05683072a991a6a681503e3acdab83206713f4500b5fba60f69aef20174.elf1⤵