Overview

overview

10

Static

static

7

08d16f99a0...81.elf

debian-9-armhf

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    b8dfb910b925f434b12bdc73a9d9d2ed.bin

  • Size

    47KB

  • Sample

    240412-bzb1vaef6y

  • MD5

    8f99ed1420636d2dc0d83ff47fd2a648

  • SHA1

    f0ab34346b8d9d8a06638a72202e4cbecea2cacd

  • SHA256

    17db2c7703693b7052a604e6fb0f0efe1565990b46e3f94d35d2c216d05e8c14

  • SHA512

    49ca467dd13deca6fbe10ef9f937d396a350eb7ad7a9e9c0cbff133776fb0c691f20e39361c2cd8b5931f6451cb0c7fd8494d45438fb863e7413f847e70eeba3

  • SSDEEP

    768:Jj4aJziDDSAuc3D8L1MzOFh/mLm/lJu5Y4dVf5ptqs92tboZ1uAsOx3IT:2TDpuc3D8xMy7kmNb4b92HAsOx3o

Score
10/10
miraimiraibotnetupx

Malware Config

Extracted

Family

mirai

Botnet

MIRAI

Targets

    • Target

      08d16f99a0e02bb0c730c99e5c108088cade2236020064ed835ead753e9ae281.elf

    • Size

      48KB

    • MD5

      b8dfb910b925f434b12bdc73a9d9d2ed

    • SHA1

      8d49d6801ea8456272a6d97fd27d517f59eef427

    • SHA256

      08d16f99a0e02bb0c730c99e5c108088cade2236020064ed835ead753e9ae281

    • SHA512

      4c57f12379fb8256b4caf77af5b58da40ac2f4b7fcb4df934d5d71ceeb78181dd0797341d9b1c4530dc0cdb3ff4f445511f74b641dd4daf238a9fa945d631433

    • SSDEEP

      768:09jTER9s7MbCZD9xXgwJuUIhcr4Rv07LCziAHGmdU5j9q3UELTw/5AyMkKqvTlB:gEDs7MeZDrwwJuVFRvjiUG4LU/RMkrlB

    Score
    10/10
    miraimiraibotnet

    • Mirai

      Mirai is a prevalent Linux malware infecting exposed network devices.

      botnetmirai

    • Deletes itself

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    behavioral1

MITRE ATT&CK Matrix ATT&CK v13

Tasks