Overview

overview

10

Static

static

10

b33c9cf1c2...10.elf

ubuntu-18.04-amd64

10

Analysis

  • max time kernel
    139s
  • max time network
    140s
  • platform
    ubuntu-18.04_amd64
  • resource
    ubuntu1804-amd64-20221125-en
  • resource tags

    arch:amd64arch:i386image:ubuntu1804-amd64-20221125-enkernel:4.15.0-161-genericlocale:en-usos:ubuntu-18.04-amd64system
  • submitted
    01-06-2023 20:21

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    b33c9cf1c20dfb96139aa8039865f610.elf

  • Size

    45KB

  • MD5

    b33c9cf1c20dfb96139aa8039865f610

  • SHA1

    33ca5a074491910a42e458dbba2579f5e531b029

  • SHA256

    352124941c6104f42710220c77fadf3057ae1236e6c6ad0fe8a01539688122e0

  • SHA512

    d22e92e0520a5aad362c78fcb89c4b12cc99d54e5a050bb0ee01ba0f8ef06d5f1293348749937b216b744754dee0bb0cfb8e5fe2fa566945c84db74740a13f88

  • SSDEEP

    768:tmPgErQwYqbcwLAixtn1GZHG3ph/QEA1+Ay3t6y9I8FESnIv1UD:tigErQwVQwR7GZm5NA1+dd6y9NESnM1U

Score
10/10
miraibotnet

Malware Config

Signatures

  • Mirai

    Mirai is a prevalent Linux malware infecting exposed network devices.

    botnetmirai
  • Changes its process name 1 IoCs
  • Writes file to tmp directory 1 IoCs

    Malware often drops required files in the /tmp directory.

Processes

  • /tmp/b33c9cf1c20dfb96139aa8039865f610.elf
    /tmp/b33c9cf1c20dfb96139aa8039865f610.elf
    1⤵
    • Changes its process name
    • Writes file to tmp directory
    PID:599

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • /tmp/tempcFnce1
    Filesize

    45KB

    MD5

    b33c9cf1c20dfb96139aa8039865f610

    SHA1

    33ca5a074491910a42e458dbba2579f5e531b029

    SHA256

    352124941c6104f42710220c77fadf3057ae1236e6c6ad0fe8a01539688122e0

    SHA512

    d22e92e0520a5aad362c78fcb89c4b12cc99d54e5a050bb0ee01ba0f8ef06d5f1293348749937b216b744754dee0bb0cfb8e5fe2fa566945c84db74740a13f88

    Download Submit