Overview

overview

10

Static

static

5

c77a735aab...60.elf

debian-12-armhf

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    5da6cd32bd2abbf9908323f804a84048.bin

  • Size

    45KB

  • Sample

    241227-bpxjssxpgn

  • MD5

    bd8d9c52610cb48a3a3a4b638e2647ca

  • SHA1

    51f8433117f4a5cc70cff3786465eac2893ac40d

  • SHA256

    287943278a12f41bc17477695d93d7982254cb8cf61d26b027ab8f6817113382

  • SHA512

    4bdae6bd5fedb96ae6aaf364b2518605ae764dbabba1010c11e192e0b32882aa183ff731c7701862bc54c6327fcf8b80afb296a2063db8a868ace5c674f90bbc

  • SSDEEP

    768:NoQ/DEX3tDP8Hqlib6el9Cuekw28i4I1XBZngC0/wSlYRKIkM9vXLCuHLoeA1ykg:vQHuHoib6k9Cuw28ijsYXtkCv2ubAzmJ

Score
10/10
mirailzrdbotnetdefense_evasiondiscoveryupx

Malware Config

Extracted

Family

mirai

Botnet

LZRD

Targets

    • Target

      c77a735aabf6e30a8ef722fda598b5cb4f278dca2bba4487c22d75f51c3db260.elf

    • Size

      45KB

    • MD5

      5da6cd32bd2abbf9908323f804a84048

    • SHA1

      b3cf93bf8e6dfe600c1e00e22646a8523b60e328

    • SHA256

      c77a735aabf6e30a8ef722fda598b5cb4f278dca2bba4487c22d75f51c3db260

    • SHA512

      f24c7789420b8bfd1991d7b9d0594d0b538f289b7d7fabf39e361628259047b797fdffd9af1e4f15b2ce27d707b3fc3788735760c7fae24d9ea77b851436fdae

    • SSDEEP

      768:S/TYCoIxdEk+AxoTZAZHFeq8b3A9q3UELbUXfi6nVMQHI4vcGpva:SECFd+A6YHAxJLRQZa

    Score
    10/10
    mirailzrdbotnetdefense_evasiondiscovery

    • Mirai

      Mirai is a prevalent Linux malware infecting exposed network devices.

      botnetmirai

    • Mirai family

      mirai

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

      defense_evasion

    • Writes file to system bin folder

    behavioral1

MITRE ATT&CK Enterprise v15

Tasks