Overview

overview

10

Static

static

5

544ae57dec...f3.elf

debian-9-mips

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    544ae57dece1f369199ed5a020b40328aa29b9693d3f5ff023afd067ae725cf3.elf

  • Size

    25KB

  • Sample

    240930-bf3z8azcmp

  • MD5

    2dcf5ba4fbef3d78e91ee3ce72b1c311

  • SHA1

    b90311380234ef4173ca4e6a150917ddf71cfe91

  • SHA256

    544ae57dece1f369199ed5a020b40328aa29b9693d3f5ff023afd067ae725cf3

  • SHA512

    6a44371bf61120e0c0178fef243ff7632e4e2f34e9cc37fdf36f4d9bd932115b10a4c5c63a4f1a9230a8af402261a4ef4c139cc18a149ea4c3a79cd263d454c6

  • SSDEEP

    768:iM3QQ2ZzxfqR/zI6pMoIxb0OEHJgGlzDpbuR1Ji:/QQ2JxfgzNyoIxoOEFVJu0

Score
10/10
miraibotnetdefense_evasiondiscoveryupx

Malware Config

Targets

    • Target

      544ae57dece1f369199ed5a020b40328aa29b9693d3f5ff023afd067ae725cf3.elf

    • Size

      25KB

    • MD5

      2dcf5ba4fbef3d78e91ee3ce72b1c311

    • SHA1

      b90311380234ef4173ca4e6a150917ddf71cfe91

    • SHA256

      544ae57dece1f369199ed5a020b40328aa29b9693d3f5ff023afd067ae725cf3

    • SHA512

      6a44371bf61120e0c0178fef243ff7632e4e2f34e9cc37fdf36f4d9bd932115b10a4c5c63a4f1a9230a8af402261a4ef4c139cc18a149ea4c3a79cd263d454c6

    • SSDEEP

      768:iM3QQ2ZzxfqR/zI6pMoIxb0OEHJgGlzDpbuR1Ji:/QQ2JxfgzNyoIxoOEFVJu0

    Score
    10/10
    miraibotnetdefense_evasiondiscovery

    • Mirai

      Mirai is a prevalent Linux malware infecting exposed network devices.

      botnetmirai

    • Contacts a large (20537) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

      discovery

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

      discovery

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

      defense_evasion
    behavioral1

MITRE ATT&CK Enterprise v15

Tasks