Analysis
-
max time kernel
149s -
max time network
133s -
platform
ubuntu-20.04_amd64 -
resource
ubuntu2004-amd64-20240221-en -
resource tags
-
submitted
28-03-2024 02:42
General
-
Target
e3f4d5deba63f5ccf226bb0ff3398824d55ff3084d4f4a772e31f8b5bbfa116c.elf
-
Size
21KB
-
MD5
c22b11b4f9bcc44d2b71c490e5ac17f8
-
SHA1
260ea557f2a4a04d9c530836d3aab5319d4b9795
-
SHA256
e3f4d5deba63f5ccf226bb0ff3398824d55ff3084d4f4a772e31f8b5bbfa116c
-
SHA512
aa7a9651241f88b03fed2786578a11dbbc291ec2f793902d4302c8396a1841ad44f5fe869e36a9a77f4469f62167fd102e86c152e603c777968946e18ce5a730
-
SSDEEP
384:MEcDqRfKUWFH39z+/49ETXsayqWruQ7eqOZi5MoJz0ZhBi+v1Rp8:VMkKJFH39CBXsaAyKOZi61dp8
Score
10/10
Malware Config
Extracted
Family
mirai
Botnet
LZRD
Signatures
-
Mirai
Mirai is a prevalent Linux malware infecting exposed network devices.
-
Modifies Watchdog functionality 1 TTPs 2 IoCs
Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.
-
Enumerates running processes
Discovers information about currently running processes on the system
-
Writes file to system bin folder 1 TTPs 2 IoCs
-
Reads runtime system information 64 IoCs
Reads data from /proc virtual filesystem.
Processes
-
/tmp/e3f4d5deba63f5ccf226bb0ff3398824d55ff3084d4f4a772e31f8b5bbfa116c.elf/tmp/e3f4d5deba63f5ccf226bb0ff3398824d55ff3084d4f4a772e31f8b5bbfa116c.elf1⤵