Overview

overview

10

Static

static

5

ff4dc55c5f...01.elf

debian-9-mipsel

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    ff4dc55c5ff519b6dd3e18ae7ed93d7b44699174b12d4501bfbfac17cf65ea01.elf

  • Size

    43KB

  • Sample

    241121-kzw6fsvnhl

  • MD5

    83670883bf6c23fde31e26ace4f1f600

  • SHA1

    f96e64a1f3db3b0d61828d50b134fa8ccbe4047d

  • SHA256

    ff4dc55c5ff519b6dd3e18ae7ed93d7b44699174b12d4501bfbfac17cf65ea01

  • SHA512

    585ce15f4f503ed044f42af00d70039bd09b8ed90b68fd293e230a2652a10c7ce56d153535bdb47105ee87629c56deddcb0bda66ace03f6af815a137c1057115

  • SSDEEP

    768:4QdzLFMbXkqyyxwmGFm3qsSPhkj96MiKrecs6cDtyO5XnQDlIPyWZ:nPmwqBOc31LNrecs6KtPXQDSh

Score
10/10
miraibotnetdefense_evasiondiscoveryupx

Malware Config

Targets

    • Target

      ff4dc55c5ff519b6dd3e18ae7ed93d7b44699174b12d4501bfbfac17cf65ea01.elf

    • Size

      43KB

    • MD5

      83670883bf6c23fde31e26ace4f1f600

    • SHA1

      f96e64a1f3db3b0d61828d50b134fa8ccbe4047d

    • SHA256

      ff4dc55c5ff519b6dd3e18ae7ed93d7b44699174b12d4501bfbfac17cf65ea01

    • SHA512

      585ce15f4f503ed044f42af00d70039bd09b8ed90b68fd293e230a2652a10c7ce56d153535bdb47105ee87629c56deddcb0bda66ace03f6af815a137c1057115

    • SSDEEP

      768:4QdzLFMbXkqyyxwmGFm3qsSPhkj96MiKrecs6cDtyO5XnQDlIPyWZ:nPmwqBOc31LNrecs6KtPXQDSh

    Score
    10/10
    miraibotnetdefense_evasiondiscovery

    • Mirai

      Mirai is a prevalent Linux malware infecting exposed network devices.

      botnetmirai

    • Mirai family

      mirai

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

      defense_evasion

    • Enumerates running processes

      Discovers information about currently running processes on the system

    • Writes file to system bin folder

    behavioral1

MITRE ATT&CK Enterprise v15

Tasks