Analysis

  • max time kernel
    1s
  • max time network
    3s
  • platform
    debian-9_mips
  • resource
    debian9-mipsbe-20240611-en
  • resource tags

    arch:mipsimage:debian9-mipsbe-20240611-enkernel:4.9.0-13-4kc-maltalocale:en-usos:debian-9-mipssystem
  • submitted
    26-11-2024 10:52

General

  • Target

    dlr.mips.elf

  • Size

    1KB

  • MD5

    70311fc868f15c02b2fd4177f1750902

  • SHA1

    c6023cd79eefcbddaa3a2989c88ea033a4084fab

  • SHA256

    252af59966d1fd58a94b6397f02e04ce785da3050e3e7e573fcbfcad2c797203

  • SHA512

    988ad4521b75cebcc94c25414f9f49e07e389e7b933706ce9548a0f391f94ef0ee0c199c545531fead172abc6086af37a971e81d7d16098fb442466af0e02175

Malware Config

Extracted

Family

mirai

Botnet

LZRD

Signatures

  • Mirai

    Mirai is a prevalent Linux malware infecting exposed network devices.

  • Mirai family
  • System Network Configuration Discovery 1 TTPs 1 IoCs

    Adversaries may gather information about the network configuration of a system.

  • Writes file to tmp directory 1 IoCs

    Malware often drops required files in the /tmp directory.

Processes

  • /tmp/dlr.mips.elf
    /tmp/dlr.mips.elf
    1⤵
    • System Network Configuration Discovery
    • Writes file to tmp directory
    PID:705

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • /tmp/byte

    Filesize

    137KB

    MD5

    442269900f28ef10d8b7a13f2bc5ed86

    SHA1

    2f997966590600fb4b5572f306a40bcbb6fe79eb

    SHA256

    a1badb5317009fe55702c638b0c5816a92337e855e83db12e99e721db7b193c3

    SHA512

    d861babc3d83bf705aa5efd5276e928d6335eabfe58c604968315f865ae1765fe9b099b21de8045b3acfc6b66b5c384ec39888dd72d69bc4105703cff9e19db1