Overview

overview

10

Static

static

10

7452a8cd6d...c1.elf

debian-12-mipsel

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    f3f909238b26928d0587e272fc702866.bin

  • Size

    38KB

  • Sample

    240421-cghaksgc28

  • MD5

    d16809be96fb967bce1548680830535d

  • SHA1

    8063e642f4d2a9ca8197d030e6190fdcde82837b

  • SHA256

    6f047154e60b7bb0c18b593fddf51676120ca957552440159b3d4e853be15366

  • SHA512

    0d998f6c6a654bf6942831f24b554aefe63cef8f3f571d0bdbb454ff534117fd30e37b41e68d1f87e58350488c43b841a1178503db506befe798257b171560a5

  • SSDEEP

    768:GbXuLlVbHOnms+vVDCqhbyJrR5LI1tVOxKFtQFfNCbGd6iDHdiu/BjN4bIzE+C:aupVbHOuVCpRZytVQKFtQnCad6SHHtuf

Score
10/10
miraimiraievasion

Malware Config

Extracted

Family

mirai

Botnet

MIRAI

Targets

    • Target

      7452a8cd6d737917f4d19adcef67e8cc47b643da9d703a37fb2af6644a78edc1.elf

    • Size

      97KB

    • MD5

      f3f909238b26928d0587e272fc702866

    • SHA1

      aa2a80dc9db8553ea5e17958130662955ade4e10

    • SHA256

      7452a8cd6d737917f4d19adcef67e8cc47b643da9d703a37fb2af6644a78edc1

    • SHA512

      2b09a7fd4391dd9bc48314eaaa75a40eabe8b7332099da2525193cb5f79a0b8d654de0d668fc35806f8fe45bdfa21095f1411c9fe29cbf85eb605bee6d154085

    • SSDEEP

      1536:8wPBYpO2CUIO2/M+LIjrqr1oNgfR34b7ZZ/myEhmJ:8yBYpO2rI/u2R3C7gcJ

    Score
    7/10
    evasion

    • Deletes Audit logs

      Deletes logs related to the Linux Audit framework.

      evasion

    • Deletes itself

    • Deletes journal logs

      Deletes systemd journal logs. Likely to evade detection.

      evasion

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    • Deletes log files

      Deletes log files on the system.

    • Enumerates running processes

      Discovers information about currently running processes on the system

    behavioral1

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Indicator Removal

3
T1070

Impair Defenses

1
T1562

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks