Overview

overview

10

Static

static

7

5824d2ee74...c1.elf

debian-9-mipsel

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    b057394091857d8cc629fa0b5652efa5.bin

  • Size

    23KB

  • Sample

    231121-c7vnlacc9v

  • MD5

    269ac38cd6f3c87c9b3228bda0816d20

  • SHA1

    7904c5548bb188a88def8ea5b3196036f60a2912

  • SHA256

    40855e5b8f9ad56c0be7873e687b35475e65ea8dbbeba1646e06025243603e74

  • SHA512

    6db6e704b0245ffc58c8a894e7a1c02b36369f7e582d7df2f738755255cef62df8ca76fdfa85d566566dd4bdd20f93c1c9166cc5c38101be2fc3f6822072520e

  • SSDEEP

    384:YwAN4waimyJxvpwoYoUhVrRzmvfCkK44al2lR/Ajjf5Uqf8SA:YwqHmyJFpMo8rhV4pklR/wqqPA

Score
10/10
mirailzrdbotnetupx

Malware Config

Extracted

Family

mirai

Botnet

LZRD

Targets

    • Target

      5824d2ee749ccb4438502a0faa223be79c9c5e23cd93f0a58f7efea88dbf3bc1.elf

    • Size

      24KB

    • MD5

      b057394091857d8cc629fa0b5652efa5

    • SHA1

      e61474ef2a837b7b313d56d0efaf3f7711b36cb8

    • SHA256

      5824d2ee749ccb4438502a0faa223be79c9c5e23cd93f0a58f7efea88dbf3bc1

    • SHA512

      f0a88e5e75e42c97d2d398f9c8a9100e0e50b0027d1167a21cbaf9e7c2d3f072bc493c5fec5c13cd80e927c88c077123f178ce270e7cd52a513c234f7d33e8ec

    • SSDEEP

      768:oCrQlS07dEv0UXqUhvQE+CXQKMQKCXBpxQZqEWvq:/QlS07FUXqIYSXQKquqqo

    Score
    10/10
    mirailzrdbotnet

    • Mirai

      Mirai is a prevalent Linux malware infecting exposed network devices.

      botnetmirai

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    • Enumerates running processes

      Discovers information about currently running processes on the system

    • Writes file to system bin folder

    behavioral1

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Hijack Execution Flow

1
T1574

Privilege Escalation

Hijack Execution Flow

1
T1574

Defense Evasion

Impair Defenses

1
T1562

Hijack Execution Flow

1
T1574

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks