Analysis

  • max time kernel
    1s
  • max time network
    4s
  • platform
    debian-9_mips
  • resource
    debian9-mipsbe-20240611-en
  • resource tags

    arch:mipsimage:debian9-mipsbe-20240611-enkernel:4.9.0-13-4kc-maltalocale:en-usos:debian-9-mipssystem
  • submitted
    15-11-2024 02:26

General

  • Target

    412661a317a946a2aca23d7ac4ae9c0bdca63d843dbc5d126b79afb9c56426fa.elf

  • Size

    1KB

  • MD5

    6d19d8396c5512fbbc86fc36363946f5

  • SHA1

    618542d497ab2264b34c771841254a60e8884e02

  • SHA256

    412661a317a946a2aca23d7ac4ae9c0bdca63d843dbc5d126b79afb9c56426fa

  • SHA512

    1addd2d94bc776473b4b3e9c761ae0eac01d1510bb595e6d522318627017887123a83a3b4d8f234ecd61a8eac67cc7f04604931fe636767b1f90454a2788e0c4

Score
10/10

Malware Config

Extracted

Family

mirai

Botnet

LZRD

Signatures

  • Mirai

    Mirai is a prevalent Linux malware infecting exposed network devices.

  • Mirai family
  • Writes file to tmp directory 1 IoCs

    Malware often drops required files in the /tmp directory.

Processes

  • /tmp/412661a317a946a2aca23d7ac4ae9c0bdca63d843dbc5d126b79afb9c56426fa.elf
    /tmp/412661a317a946a2aca23d7ac4ae9c0bdca63d843dbc5d126b79afb9c56426fa.elf
    1⤵
    • Writes file to tmp directory
    PID:705

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • /tmp/byte

    Filesize

    137KB

    MD5

    442269900f28ef10d8b7a13f2bc5ed86

    SHA1

    2f997966590600fb4b5572f306a40bcbb6fe79eb

    SHA256

    a1badb5317009fe55702c638b0c5816a92337e855e83db12e99e721db7b193c3

    SHA512

    d861babc3d83bf705aa5efd5276e928d6335eabfe58c604968315f865ae1765fe9b099b21de8045b3acfc6b66b5c384ec39888dd72d69bc4105703cff9e19db1