Overview

overview

10

Static

static

5

a4b7d44f09...b6.elf

debian-9-mips

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    91b4f4aaf653cddafe31106cbb074015.bin

  • Size

    22KB

  • Sample

    241227-b2mkcsyjhl

  • MD5

    bfae8e6dc688df09ceef69ba1d0c5fe9

  • SHA1

    3ce152c59dd3e7a460db2ddfff59ab64e82340d5

  • SHA256

    dd8c87fb2de6a66b9c52af573059190854f224c81c913a76e8c428b880bdd113

  • SHA512

    799570febc31451e7c1f80743a2c2805c869d97b23d630da54ae451789ee47ab1b07a92b6988a874cd79318a3317ef055da76be0e053b8e2cf04cb1e8ecbef91

  • SSDEEP

    384:VXqIy4SfqmgBwV3ohZHHcTnnoJtlNGeAsWAiImiPnuDW8iMRspF19Ll:7ggBw6nHwoJXb7mBDdiMWpF7Ll

Score
10/10
mirailzrdbotnetdefense_evasiondiscoveryupx

Malware Config

Extracted

Family

mirai

Botnet

LZRD

Targets

    • Target

      a4b7d44f099ed2f795d2531feefa6cbaf7abdeccae410b885bb2af105365bdb6.elf

    • Size

      23KB

    • MD5

      91b4f4aaf653cddafe31106cbb074015

    • SHA1

      604075eb4954944bf4f06e0ffa4e53269c6f2ffd

    • SHA256

      a4b7d44f099ed2f795d2531feefa6cbaf7abdeccae410b885bb2af105365bdb6

    • SHA512

      52c2a6b4a7019e6af97203214fddff6ecec0572c8684b5d8ea1ec09b9afa8f4f3b47eb8b8f0524d412a43cfc076519602ccde72fb3587511ac33bde27ec9f735

    • SSDEEP

      384:neD8ZSH2LLZUYyGZbsOiTrowSN9rnZMINlphQ/HYtui57kmdzJgGlzDpH7uNj1J+:neD8ZSWvZHZbs1row697qohQvg95QizJ

    Score
    10/10
    mirailzrdbotnetdefense_evasiondiscovery

    • Mirai

      Mirai is a prevalent Linux malware infecting exposed network devices.

      botnetmirai

    • Mirai family

      mirai

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

      defense_evasion

    • Writes file to system bin folder

    behavioral1

MITRE ATT&CK Enterprise v15

Tasks