Overview

overview

10

Static

static

5

fec20fde8f...d9.elf

debian-12-armhf

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    d5af8f2bb8c7c3e39981ba0099fa1d1c.bin

  • Size

    50KB

  • Sample

    241213-bykxcswldn

  • MD5

    70128626dcafc06a8039ef5721f1dd9a

  • SHA1

    511034756de1140f86142c0f7b20fdabaecb4b35

  • SHA256

    1726ad4bfe9045a38397c2166b5940b393f8da70843430b024b486add5820b71

  • SHA512

    b2621aa29ec06d3b5f9e25e131f32ac953c38803a9aff69caee3c5fa80afd7bd44cec94e517059f4832265cb2eda7090fa8204dbf8dd711b07c4db56c7e7bd1f

  • SSDEEP

    1536:Apngp/Vizp4WpV1hdqeYUVXiw/C+E9Jafitlmn:ApG/Vizp4m1hcEVREnhtEn

Score
10/10
miraibotnetbotnetdefense_evasiondiscoveryupx

Malware Config

Extracted

Family

mirai

Botnet

BOTNET

Targets

    • Target

      fec20fde8f5cb8d571cee50a2bf8103c9e63c57b2bfd098693974389fd79c8d9.elf

    • Size

      50KB

    • MD5

      d5af8f2bb8c7c3e39981ba0099fa1d1c

    • SHA1

      f12212c88dddb3c0298987b917c55063f942df88

    • SHA256

      fec20fde8f5cb8d571cee50a2bf8103c9e63c57b2bfd098693974389fd79c8d9

    • SHA512

      42b3455e467f11b68f000f6f375bd9d7f42d77c16184a3a6a36bbf4751e72a01b692032ee6d03a8ed398484cacbdb6231478d42099004f3674de84873c2e817e

    • SSDEEP

      768:9WIA55yDHv3hnZji8OiWssyP151K8BLXJfiWkxnUGG3qQX9q3UELuFFjj3ytEJwc:9y5IThnZie151KKRi3UGOBmLufP3Huc

    Score
    10/10
    miraibotnetbotnetdefense_evasiondiscovery

    • Mirai

      Mirai is a prevalent Linux malware infecting exposed network devices.

      botnetmirai

    • Mirai family

      mirai

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

      defense_evasion
    behavioral1

MITRE ATT&CK Enterprise v15

Tasks