Analysis
-
max time kernel
150s -
max time network
152s -
platform
linux_mipsel -
resource
debian9-mipsel-en-20211208 -
resource tags
-
submitted
21/08/2023, 01:53
General
-
Target
450a132e8091f5fc8c040b8822398ec398b110e63512c9f0988b6114b2d65914.elf
-
Size
24KB
-
MD5
d3b060e5a7f8e493e569b4b1cfb39ba3
-
SHA1
cb453e0ee200dcd1c1d2e026005f44a61054544e
-
SHA256
450a132e8091f5fc8c040b8822398ec398b110e63512c9f0988b6114b2d65914
-
SHA512
87faaf92e79066cc1dd545d57c572091150db897fbc9ebf723491e76742764220fbc341a27a01fa85de2589d31db179e6723a621a39291a1a52383cdbbbcc63c
-
SSDEEP
768:c4rQlS07dEv0UXqUhvQE+CXQKMQKCXBpUGfZq8Wvp:BQlS07FUXqIYSXQKquvqv
Score
10/10
Malware Config
Extracted
Family
mirai
Botnet
LZRD
Signatures
-
Mirai
Mirai is a prevalent Linux malware infecting exposed network devices.
-
Modifies Watchdog functionality 1 TTPs 2 IoCs
Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.
-
Writes file to system bin folder 1 TTPs 2 IoCs
Processes
-
/tmp/450a132e8091f5fc8c040b8822398ec398b110e63512c9f0988b6114b2d65914.elf/tmp/450a132e8091f5fc8c040b8822398ec398b110e63512c9f0988b6114b2d65914.elf1⤵