Analysis

  • max time kernel
    2s
  • max time network
    6s
  • platform
    debian-9_mips
  • resource
    debian9-mipsbe-20240611-en
  • resource tags

    arch:mipsimage:debian9-mipsbe-20240611-enkernel:4.9.0-13-4kc-maltalocale:en-usos:debian-9-mipssystem
  • submitted
    21-11-2024 12:28

General

  • Target

    dlr.mips.elf

  • Size

    1KB

  • MD5

    0dbb730d2527020c4b247b8def446c0b

  • SHA1

    79a4c9e7ac1c26cc907b48721bb6c2afcb771766

  • SHA256

    4c19903bd3f5235ca4f8b7184199aa2df220019008c4e9c6802ad19339d2beef

  • SHA512

    5eaff2ac918c2afd7639629fdd57d15daa2923284436488c957734febd465ab5af5bcc30b4830565a4c66649709893fffd92af6709696aeb5c590b059208f46d

Malware Config

Extracted

Family

mirai

Botnet

LZRD

Signatures

  • Mirai

    Mirai is a prevalent Linux malware infecting exposed network devices.

  • Mirai family
  • System Network Configuration Discovery 1 TTPs 1 IoCs

    Adversaries may gather information about the network configuration of a system.

  • Writes file to tmp directory 1 IoCs

    Malware often drops required files in the /tmp directory.

Processes

  • /tmp/dlr.mips.elf
    /tmp/dlr.mips.elf
    1⤵
    • System Network Configuration Discovery
    • Writes file to tmp directory
    PID:692

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • /tmp/byte

    Filesize

    137KB

    MD5

    442269900f28ef10d8b7a13f2bc5ed86

    SHA1

    2f997966590600fb4b5572f306a40bcbb6fe79eb

    SHA256

    a1badb5317009fe55702c638b0c5816a92337e855e83db12e99e721db7b193c3

    SHA512

    d861babc3d83bf705aa5efd5276e928d6335eabfe58c604968315f865ae1765fe9b099b21de8045b3acfc6b66b5c384ec39888dd72d69bc4105703cff9e19db1