Overview

overview

10

Static

static

7

3940ad85e9...58.elf

debian-9-armhf

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    3940ad85e92bba493621b2bf80622d58.elf

  • Size

    45KB

  • Sample

    230601-vmdtfsfg7z

  • MD5

    3940ad85e92bba493621b2bf80622d58

  • SHA1

    1861ba1682bb29284361ff5784aacdc7dc23f4fa

  • SHA256

    e288e0300b62d77fef5a4d81c0e6758f0336ca9c4c90f5c4d29cec78fab0c984

  • SHA512

    5f1e29a3501e152cd780571a2dced25b4f557cf6baf1e9c98053ff7e4b524196e66e89cb12e4679c6a1c04a22cf41ca56aec1333a466e5bdc68898ad04f2e1e8

  • SSDEEP

    768:g/TYCoIxdEk+AxoTZAZHFeq8b3H9q3UELbUXfi6nVMQHI4vcGpvj:gECFd+A6YHAxWLRQZj

Score
10/10
mirailzrdbotnetupx

Malware Config

Extracted

Family

mirai

Botnet

LZRD

Targets

    • Target

      3940ad85e92bba493621b2bf80622d58.elf

    • Size

      45KB

    • MD5

      3940ad85e92bba493621b2bf80622d58

    • SHA1

      1861ba1682bb29284361ff5784aacdc7dc23f4fa

    • SHA256

      e288e0300b62d77fef5a4d81c0e6758f0336ca9c4c90f5c4d29cec78fab0c984

    • SHA512

      5f1e29a3501e152cd780571a2dced25b4f557cf6baf1e9c98053ff7e4b524196e66e89cb12e4679c6a1c04a22cf41ca56aec1333a466e5bdc68898ad04f2e1e8

    • SSDEEP

      768:g/TYCoIxdEk+AxoTZAZHFeq8b3H9q3UELbUXfi6nVMQHI4vcGpvj:gECFd+A6YHAxWLRQZj

    Score
    10/10
    mirailzrdbotnet

    • Mirai

      Mirai is a prevalent Linux malware infecting exposed network devices.

      botnetmirai

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    • Writes file to system bin folder

    behavioral1

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Hijack Execution Flow

1
T1574

Privilege Escalation

Hijack Execution Flow

1
T1574

Defense Evasion

Impair Defenses

1
T1562

Hijack Execution Flow

1
T1574

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks