Overview

overview

10

Static

static

5

e61be77e89...47.elf

debian-9-mips

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    ab2fbe986d21bc0ebcbd76380975abb5.bin

  • Size

    22KB

  • Sample

    241230-b3dzlstmav

  • MD5

    0ea5492f7f307a52a4cdeb9b96be1e6e

  • SHA1

    1307bae7c49d9e937fa38007755329795d6738c8

  • SHA256

    5ff256c0a49cf720d3dfc3fcecae2eb99b2324e51f7f3344927178215cb2372a

  • SHA512

    7526bdae9f0a9b703c6232859989bf90896c28aca4a5e0de4fc59a1b3d8c66c776c9eff442b1aa6dd164db7fa45e20f56498ed7b32340ac7bfb5a3054fcb68c9

  • SSDEEP

    384:cSoFKoFDiD1QpiuTyHwpHPlubKv6ImCgyBd2j9+40ZnXpHftsITTyQmi1c5Bj9SA:cNFCJuu0tumv6+2j9lAn5H2ETyF/5Bjp

Score
10/10
mirailzrdbotnetdefense_evasiondiscoveryupx

Malware Config

Extracted

Family

mirai

Botnet

LZRD

Targets

    • Target

      e61be77e890a8cabc3bfec03513492a451ecb4b5bb44d716a6d4caefa50c8047.elf

    • Size

      23KB

    • MD5

      ab2fbe986d21bc0ebcbd76380975abb5

    • SHA1

      0ec4cc31edfbd84f8be7665038b23226cfe2cbfa

    • SHA256

      e61be77e890a8cabc3bfec03513492a451ecb4b5bb44d716a6d4caefa50c8047

    • SHA512

      593953a62955243982588ff1bcbc3655a5f50fd77850972fb014a3fd988811250d237f7a050be85b21c2cec25b9fb35ccdac30bec21ce54ac1d6fed4ba622bc1

    • SSDEEP

      384:YeD8ZSH2LLZUYyGZbsOiTrowSN9rnZMINlphQ/HYtuiYmdtJgGlzDpH7uNj1JA4G:YeD8ZSWvZHZbs1row697qohQvg9YitJN

    Score
    10/10
    mirailzrdbotnetdefense_evasiondiscovery

    • Mirai

      Mirai is a prevalent Linux malware infecting exposed network devices.

      botnetmirai

    • Mirai family

      mirai

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

      defense_evasion

    • Writes file to system bin folder

    behavioral1

MITRE ATT&CK Enterprise v15

Tasks