Overview

overview

10

Static

static

7

c9e5528e20...bc.elf

ubuntu-18.04-amd64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    c9e5528e20ea145f226f0b8e144994bc.elf

  • Size

    20KB

  • Sample

    240224-q8849sdf73

  • MD5

    c9e5528e20ea145f226f0b8e144994bc

  • SHA1

    e0b37a76f542b172e782f4fce815f734e7c02070

  • SHA256

    3e52af9db19a2219d051de8e7a579b533974ad23cc8b07c1abf2d05a3870d99b

  • SHA512

    e5d0f9dfb637f2338524245d086a314c74867fbd3b7e3158a5dcf6253056b3f0daf0d95ef3a71b178d886b030ed1d0d5f49c38a8183cc57d1f428b6863b707e7

  • SSDEEP

    384:MgWLpj8s/qPui8uZxoIA57RWQjJiEVi+ZkXaqOKV14b+502F2vwA9dWuMW21bAKU:O98o08kxofBE+ZkXaqGbp2F2TWul0c5h

Score
10/10
mirailzrdbotnetlinuxupx

Malware Config

Extracted

Family

mirai

Botnet

LZRD

Targets

    • Target

      c9e5528e20ea145f226f0b8e144994bc.elf

    • Size

      20KB

    • MD5

      c9e5528e20ea145f226f0b8e144994bc

    • SHA1

      e0b37a76f542b172e782f4fce815f734e7c02070

    • SHA256

      3e52af9db19a2219d051de8e7a579b533974ad23cc8b07c1abf2d05a3870d99b

    • SHA512

      e5d0f9dfb637f2338524245d086a314c74867fbd3b7e3158a5dcf6253056b3f0daf0d95ef3a71b178d886b030ed1d0d5f49c38a8183cc57d1f428b6863b707e7

    • SSDEEP

      384:MgWLpj8s/qPui8uZxoIA57RWQjJiEVi+ZkXaqOKV14b+502F2vwA9dWuMW21bAKU:O98o08kxofBE+ZkXaqGbp2F2TWul0c5h

    Score
    10/10
    mirailzrdbotnet

    • Mirai

      Mirai is a prevalent Linux malware infecting exposed network devices.

      botnetmirai

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    • Enumerates running processes

      Discovers information about currently running processes on the system

    • Writes file to system bin folder

    behavioral1

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Hijack Execution Flow

1
T1574

Privilege Escalation

Hijack Execution Flow

1
T1574

Defense Evasion

Impair Defenses

1
T1562

Hijack Execution Flow

1
T1574

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks