Overview

overview

10

Static

static

10

zmap.mips.elf

debian-9-mips

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    zmap.mips.elf

  • Size

    94KB

  • Sample

    241029-sahwjaxmcr

  • MD5

    ff54c0575605a1786c861ab491431e72

  • SHA1

    f5b8d74ca24fed32038b790d529cbf6a3ed5975b

  • SHA256

    1b5e564cc6cacca07dcc0274b12b0b3a1dffe1eeda5bf82136e547380dc6b86d

  • SHA512

    d3be71155be88c4b5fa0741a83a0351fe9fdd9e268345a3adbe9644ac664cbc2e55d82f24b8218c7b5a3a39c12ad3427f332c81ed823d8a9d7c35319624476a7

  • SSDEEP

    1536:mF4tsbv54o+3bPhXhWxZJUPY2iUifyecpeo6X4LVLO:mF4tsr54o+rPhkxUPY2iUifyecIX4L5O

Score
10/10
miraiunstabledefense_evasiondiscovery

Malware Config

Extracted

Family

mirai

Botnet

UNSTABLE

Targets

    • Target

      zmap.mips.elf

    • Size

      94KB

    • MD5

      ff54c0575605a1786c861ab491431e72

    • SHA1

      f5b8d74ca24fed32038b790d529cbf6a3ed5975b

    • SHA256

      1b5e564cc6cacca07dcc0274b12b0b3a1dffe1eeda5bf82136e547380dc6b86d

    • SHA512

      d3be71155be88c4b5fa0741a83a0351fe9fdd9e268345a3adbe9644ac664cbc2e55d82f24b8218c7b5a3a39c12ad3427f332c81ed823d8a9d7c35319624476a7

    • SSDEEP

      1536:mF4tsbv54o+3bPhXhWxZJUPY2iUifyecpeo6X4LVLO:mF4tsr54o+rPhkxUPY2iUifyecIX4L5O

    Score
    7/10
    defense_evasiondiscovery

    • Deletes itself

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

      defense_evasion

    • Writes file to system bin folder

    behavioral1

MITRE ATT&CK Enterprise v15

Tasks