Overview

overview

10

Static

static

5

5af8f85e08...36.elf

debian-12-mipsel

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    69907ef1bb7ba49e4fa81023b6434a84.bin

  • Size

    23KB

  • Sample

    241227-bqe15sxpfx

  • MD5

    bca68e8d3f5dacca6646911c86f84d6d

  • SHA1

    47303bba1bdd1fd2acb387355b20722216b20cc3

  • SHA256

    7071b163d07659997220a802413716241b49b9e6f35f0a2ef858fe31ca3a4a87

  • SHA512

    7998860d982844cba988e13d5b069bf3fa343844b5076965b4bbb2c1ec90cdcbab75759c2a14cb6a18be57ab2e83255497a2d6cb702dad11db2f2fa899b3b1cf

  • SSDEEP

    384:gIbn+mDpOjOho69FrD+lzfc/34nty36xuQVbw6EiE1dqqjZCfQk5340TTFy2adiF:g0+m2OprD+l784nU3Guibwvr6CZCYk5X

Score
10/10
mirailzrdbotnetdefense_evasiondiscoveryupx

Malware Config

Extracted

Family

mirai

Botnet

LZRD

Targets

    • Target

      5af8f85e085ba5d6a9c8b513b78e62af9ef6c9a5e8c789950b7816f3cd744236.elf

    • Size

      24KB

    • MD5

      69907ef1bb7ba49e4fa81023b6434a84

    • SHA1

      a59034294b111ce415a2d5203b2687639fb49dd5

    • SHA256

      5af8f85e085ba5d6a9c8b513b78e62af9ef6c9a5e8c789950b7816f3cd744236

    • SHA512

      9f234317645818ac7ef49334b105e2dc54a319a24ab29ee51b4f446d9f5382a8162048cb241a3d40d8453e23cc07630cc0d3a28ef4f28fcd8e5e4d8b4e6a6050

    • SSDEEP

      768:oCrQlS07dEv0UXqUhvQE+CXQKMQKCXBpvbZqEWvL:/QlS07FUXqIYSXQKqulqh

    Score
    10/10
    mirailzrdbotnetdefense_evasiondiscovery

    • Mirai

      Mirai is a prevalent Linux malware infecting exposed network devices.

      botnetmirai

    • Mirai family

      mirai

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

      defense_evasion

    • Writes file to system bin folder

    behavioral1

MITRE ATT&CK Enterprise v15

Tasks