Overview

overview

10

Static

static

5

ee48906e6d...21.elf

debian-9-mips

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    54a4579132c974352d3b871e4ccc5823.bin

  • Size

    22KB

  • Sample

    241210-blrt5stjfq

  • MD5

    d01344d85413a39ab143cbdd050d64e9

  • SHA1

    68455db28efc076c5b0ca3d6bef2b53de9493008

  • SHA256

    8f411946230eda18d6e8099d60ddb881238275e3aeba1ea7b018e8c7bf9bac59

  • SHA512

    7e36d97c28096ddabd669adef52b758c213077dc348c4452122640d9fc362d1b10bcc15128e7aa53a1ec2661b6d2ea51208441b5a4eeb2b8dc503898e546a7da

  • SSDEEP

    384:pQ15X3cqgacuVOpVvHInZpfFjFNhUA/I2H67jeCYViVxFKbrTh6sre4J8C/Tp5UE:pQ1F3jgacuVgV/IZLJN+8bH67OkFM9j/

Score
10/10
mirailzrdbotnetdefense_evasiondiscoveryupx

Malware Config

Extracted

Family

mirai

Botnet

LZRD

Targets

    • Target

      ee48906e6d44a608ba40cc35ae29d5059b565c6703e0b524b2b87c1eceaa0b21.elf

    • Size

      23KB

    • MD5

      54a4579132c974352d3b871e4ccc5823

    • SHA1

      ce87e93203266a9371fc6a24d0bbc01681de26d4

    • SHA256

      ee48906e6d44a608ba40cc35ae29d5059b565c6703e0b524b2b87c1eceaa0b21

    • SHA512

      45a2eb61611afc33cd1e6faa79ef31a7089070373acb66954b70b32ad89017f81420bcb1449e4af1f7f7bb6ae5097692af57247235c641b474012eb3cee3f02f

    • SSDEEP

      384:6eD8ZSH2LLZUYyGZbsOiTrowSN9rnZMINlphQ/HYtuiBwmd1JgGlzDpH7uNj1JAn:6eD8ZSWvZHZbs1row697qohQvg9mi1JR

    Score
    10/10
    mirailzrdbotnetdefense_evasiondiscovery

    • Mirai

      Mirai is a prevalent Linux malware infecting exposed network devices.

      botnetmirai

    • Mirai family

      mirai

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

      defense_evasion

    • Writes file to system bin folder

    behavioral1

MITRE ATT&CK Enterprise v15

Tasks