Overview

overview

10

Static

static

5

b36d96ad6e...68.elf

debian-12-mipsel

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    a9f689bf8cf76ae8d59d62857f4d57b3.bin

  • Size

    23KB

  • Sample

    241217-b2tnnsxlfq

  • MD5

    4d8fcc48ac52bc32983d28fe4e4bd035

  • SHA1

    f19107b19a56bf827dd33dd029435f4b840553a8

  • SHA256

    45508051f3e477f41e1e420bd7cbf2fb8a5df8ad1216424488c16704d5cfaa43

  • SHA512

    032231d464d9838dd34dfdb1d6702a789b8d8ecd4c6e62930aaa035a3f6b6c35cfa005a1b80129f3412e3dc7db70bee931ee0e9f476a537d67b58cbcccaff30e

  • SSDEEP

    384:bvC5QGQPjz2bmIahJUV4v8Kmw0W1YnVuOL8/KUBYMirGdnrsKhferPzzSDZT:bvPjz2bmIahJUV2mw0H8ioPirGdnh8PE

Score
10/10
mirailzrdbotnetdefense_evasiondiscoveryupx

Malware Config

Extracted

Family

mirai

Botnet

LZRD

Targets

    • Target

      b36d96ad6ec160fb45c62a233a80305bf36489b2091508e37773acf162521c68.elf

    • Size

      24KB

    • MD5

      a9f689bf8cf76ae8d59d62857f4d57b3

    • SHA1

      d8da88846597f2fc8223f957833dc52f4b711680

    • SHA256

      b36d96ad6ec160fb45c62a233a80305bf36489b2091508e37773acf162521c68

    • SHA512

      f5d59a07d4e71f6f47fa9a3db2ad4d852fa9bce22f00f81ceb573a23f42e6f550415b7fa7845695f1e0f066d4afe328bb882a9356c80ded90c5d0261e3f5d7f6

    • SSDEEP

      768:otrQlS07dEv0UXqUhvQE+CXecI1+leF85gR7XZqqWvE:iQlS07FUXqIYSXU1wwpqU

    Score
    10/10
    mirailzrdbotnetdefense_evasiondiscovery

    • Mirai

      Mirai is a prevalent Linux malware infecting exposed network devices.

      botnetmirai

    • Mirai family

      mirai

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

      defense_evasion

    • Writes file to system bin folder

    behavioral1

MITRE ATT&CK Enterprise v15

Tasks