Overview

overview

10

Static

static

5

883e0e2750...a0.elf

ubuntu-20.04-amd64

Sharing

Copy URL
Twitter E-mail

General

  • Target

    7f450c92cd48f89e76cc42545287a95c.bin

  • Size

    36KB

  • Sample

    241224-btp1hsxrcr

  • MD5

    c4104478e5c579293e56254ea4837cb4

  • SHA1

    320e1c28a107f2587554952285d006c0a4a307a8

  • SHA256

    7b4ea1474fefc9ea209bb8f4cab81e6ce737b79e4da69fcb2f8571b1b850f0c8

  • SHA512

    baeb632c03082fe2febebadb5afd3d3cee7a38e2d05565b50f4abb43e1499a838908fd91205c136aa3db7ab2725c3474a1df0bf67dcf2c7f5e929792af2a1088

  • SSDEEP

    768:0htd1kbd0k/z5+JIlMfkoHXUnRh5zCBkHBHsPuUfPupdTUqRX:0h52l/z5CIlkwRh5z/yf20QX

Score
10/10
mirailzrdbotnetdefense_evasiondiscoverylinuxupx

Malware Config

Extracted

Family

mirai

Botnet

LZRD

Targets

    • Target

      883e0e27500a5dd5d22ebe043110896ec2223dfb1ce2dd152fe2da1a7f85aca0.elf

    • Size

      36KB

    • MD5

      7f450c92cd48f89e76cc42545287a95c

    • SHA1

      417afaa1961773ef81080998fbeeb04e112e8f30

    • SHA256

      883e0e27500a5dd5d22ebe043110896ec2223dfb1ce2dd152fe2da1a7f85aca0

    • SHA512

      f3e0c0e883fdec93644309bb4fb214c6b92adab7ca62ed34e4c2416157f5e336f88bf3093de474d0dca1784854078aa2561ffd7d61ca6244403afcdc82e24591

    • SSDEEP

      768:7SIF9NtuCtdnD4cqrgVJbKGbVDTETaOZHHYkRGnbcuyD7UFe:+hCn1qrgzbNmHrGnouy8U

    Score
    10/10
    mirailzrdbotnetdefense_evasiondiscovery

    • Mirai

      Mirai is a prevalent Linux malware infecting exposed network devices.

      botnetmirai

    • Mirai family

      mirai

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

      defense_evasion

    • Enumerates running processes

      Discovers information about currently running processes on the system

    behavioral1

MITRE ATT&CK Enterprise v15

Tasks