Overview

overview

10

Static

static

7

dab4d2935f...e1.elf

debian-9-armhf

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    dab4d2935ff7d215a4b5efc8f586412eb42ef797bb5257062712456623f7e5e1.elf

  • Size

    26KB

  • Sample

    240411-b5sksacb5y

  • MD5

    80b0a2d9c9c6b89f7306a1bd3f4bedde

  • SHA1

    d0b583b986b8ee11f9f197465717f318d78dc3b5

  • SHA256

    dab4d2935ff7d215a4b5efc8f586412eb42ef797bb5257062712456623f7e5e1

  • SHA512

    e1d9fff24d394b931445f84607d948068df9a3aeef8ee47684e8d166b272c340e70f87ea407378e1073ba25b2ee15f9770e08f27377eaf5ec88c41a2f3c1980d

  • SSDEEP

    768:mBPEeJMM4olieRV+X8YsXcc5+0UobMs3UozhSq:sMM4olieH+B6UobJzhSq

Score
10/10
mirailzrdbotnetupx

Malware Config

Extracted

Family

mirai

Botnet

LZRD

Targets

    • Target

      dab4d2935ff7d215a4b5efc8f586412eb42ef797bb5257062712456623f7e5e1.elf

    • Size

      26KB

    • MD5

      80b0a2d9c9c6b89f7306a1bd3f4bedde

    • SHA1

      d0b583b986b8ee11f9f197465717f318d78dc3b5

    • SHA256

      dab4d2935ff7d215a4b5efc8f586412eb42ef797bb5257062712456623f7e5e1

    • SHA512

      e1d9fff24d394b931445f84607d948068df9a3aeef8ee47684e8d166b272c340e70f87ea407378e1073ba25b2ee15f9770e08f27377eaf5ec88c41a2f3c1980d

    • SSDEEP

      768:mBPEeJMM4olieRV+X8YsXcc5+0UobMs3UozhSq:sMM4olieH+B6UobJzhSq

    Score
    10/10
    mirailzrdbotnet

    • Mirai

      Mirai is a prevalent Linux malware infecting exposed network devices.

      botnetmirai

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    • Enumerates running processes

      Discovers information about currently running processes on the system

    • Writes file to system bin folder

    behavioral1

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Hijack Execution Flow

1
T1574

Privilege Escalation

Hijack Execution Flow

1
T1574

Defense Evasion

Impair Defenses

1
T1562

Hijack Execution Flow

1
T1574

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks