Overview

overview

10

Static

static

5

c792ce87ba...57.elf

debian-12-armhf

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    c792ce87ba1b0dc37cf3d2d2b4ad3433395ae93e0f1ae9c1140d097d093c1457.elf

  • Size

    61KB

  • Sample

    241009-cs95qstenr

  • MD5

    7ff7cdd806adaea6085384f85a736106

  • SHA1

    07f7ee2a8c37722956faa1fe024b57b63732f808

  • SHA256

    c792ce87ba1b0dc37cf3d2d2b4ad3433395ae93e0f1ae9c1140d097d093c1457

  • SHA512

    53f9a53947254532b93f13241f3edef41f8d9b5fa76bd01a18eeb458d3c3ca1cdc93265aaaf638eaeb02d2f52685035fa3b4a60c1555d48f55d1f6493ce43e1d

  • SSDEEP

    768:p5lDNDz4z9We1VkLfHRzdGUelY4encoEWhowytRUE0OUkFtHyxEbuUGRrJeI7ySM:pNDzcj1VCRMde/NGdPBbqMLRAKJUGua

Score
10/10
miraibotnetdefense_evasiondiscoveryupx

Malware Config

Targets

    • Target

      c792ce87ba1b0dc37cf3d2d2b4ad3433395ae93e0f1ae9c1140d097d093c1457.elf

    • Size

      61KB

    • MD5

      7ff7cdd806adaea6085384f85a736106

    • SHA1

      07f7ee2a8c37722956faa1fe024b57b63732f808

    • SHA256

      c792ce87ba1b0dc37cf3d2d2b4ad3433395ae93e0f1ae9c1140d097d093c1457

    • SHA512

      53f9a53947254532b93f13241f3edef41f8d9b5fa76bd01a18eeb458d3c3ca1cdc93265aaaf638eaeb02d2f52685035fa3b4a60c1555d48f55d1f6493ce43e1d

    • SSDEEP

      768:p5lDNDz4z9We1VkLfHRzdGUelY4encoEWhowytRUE0OUkFtHyxEbuUGRrJeI7ySM:pNDzcj1VCRMde/NGdPBbqMLRAKJUGua

    Score
    10/10
    miraibotnetdefense_evasiondiscovery

    • Mirai

      Mirai is a prevalent Linux malware infecting exposed network devices.

      botnetmirai

    • Deletes itself

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

      defense_evasion

    • Traces itself

      Traces itself to prevent debugging attempts

    • Enumerates running processes

      Discovers information about currently running processes on the system

    • Writes file to system bin folder

    behavioral1

MITRE ATT&CK Enterprise v15

Tasks