Overview

overview

10

Static

static

7

ee1d7612f2...b1.elf

debian-12-mipsel

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    ee1d7612f2e3e20d52b4d48a73ea4d158d7c59d1600037a041a1e5f645ed2fb1.elf

  • Size

    24KB

  • Sample

    240311-cwcnmsab62

  • MD5

    df2ea0af8e03b881a44e92e3aa6a25e6

  • SHA1

    69362b205b239b1f444dcc1dd062a55883e39140

  • SHA256

    ee1d7612f2e3e20d52b4d48a73ea4d158d7c59d1600037a041a1e5f645ed2fb1

  • SHA512

    06c35c60ed4cf1382d98f3312ed2c7125e1f138aa1f0c5c05d6d606c46a484dee46e9b45fed3443e30db6445d8ae260370f829612c71f6cdcef38473d48b4e5d

  • SSDEEP

    768:cfrQlS07dEv0UXqUhvQE+CXQBszOrrF2SZqCWvy:oQlS07FUXqIYSXQmKrJ22qa

Score
10/10
mirailzrdbotnetupx

Malware Config

Extracted

Family

mirai

Botnet

LZRD

Targets

    • Target

      ee1d7612f2e3e20d52b4d48a73ea4d158d7c59d1600037a041a1e5f645ed2fb1.elf

    • Size

      24KB

    • MD5

      df2ea0af8e03b881a44e92e3aa6a25e6

    • SHA1

      69362b205b239b1f444dcc1dd062a55883e39140

    • SHA256

      ee1d7612f2e3e20d52b4d48a73ea4d158d7c59d1600037a041a1e5f645ed2fb1

    • SHA512

      06c35c60ed4cf1382d98f3312ed2c7125e1f138aa1f0c5c05d6d606c46a484dee46e9b45fed3443e30db6445d8ae260370f829612c71f6cdcef38473d48b4e5d

    • SSDEEP

      768:cfrQlS07dEv0UXqUhvQE+CXQBszOrrF2SZqCWvy:oQlS07FUXqIYSXQmKrJ22qa

    Score
    10/10
    mirailzrdbotnet

    • Mirai

      Mirai is a prevalent Linux malware infecting exposed network devices.

      botnetmirai

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    • Writes file to system bin folder

    behavioral1

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Hijack Execution Flow

1
T1574

Privilege Escalation

Hijack Execution Flow

1
T1574

Defense Evasion

Impair Defenses

1
T1562

Hijack Execution Flow

1
T1574

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks