Overview

overview

10

Static

static

7

91.92.252....20.elf

debian-9-mips

10

Analysis

  • max time kernel
    148s
  • max time network
    151s
  • platform
    debian-9_mips
  • resource
    debian9-mipsbe-20240611-en
  • resource tags

    arch:mipsimage:debian9-mipsbe-20240611-enkernel:4.9.0-13-4kc-maltalocale:en-usos:debian-9-mipssystem
  • submitted
    02/08/2024, 15:08

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    91.92.252.2-boatnet.mips-2024-07-28T120420.elf
  • Size 26KB
  • Sample240802-shv6tstenb
  • SHA256 42ab0ab2e4804f75963f4fd69ad812bc95a8dcf6a5fb865f338b2482abbaae95
  • MD5 SHA1 SHA512 SSDEEP
Score
10/10
mirailzrdbotnet

Malware Config

Extracted

Family

  • mirai

Botnet

  • LZRD

Signatures

  • Mirai

    Mirai is a prevalent Linux malware infecting exposed network devices.

    botnetmirai
  • Modifies Watchdog functionality 1 TTPs 2 IoCs

    Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

  • Writes file to system bin folder 1 TTPs 2 IoCs

Processes

  • /tmp/91.92.252.2-boatnet.mips-2024-07-28T120420.elf
    /tmp/91.92.252.2-boatnet.mips-2024-07-28T120420.elf
    1⤵
    • Modifies Watchdog functionality
    • Writes file to system bin folder
    PID:708

Network

        MITRE ATT&CK Enterprise v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads