Overview

overview

10

Static

static

5

cf4c656456...23.elf

debian-9-mipsel

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2603361b94514242aa12297aa16d8dbd.bin

  • Size

    23KB

  • Sample

    241230-bg3qvaspfn

  • MD5

    46eaca67e7e9d922c9c6474e733a2dab

  • SHA1

    06d116db08d5ab6573406db236fdbdcfd1fcec1a

  • SHA256

    d222b9940a1e34aafa7b2ecdf5032534ff5399e6be631f44b2a0ba2177aff25c

  • SHA512

    99a02a6aecf6f3c75ba360af9afede5ecddeca246271593195d36e354feca9ff07f820ad7003d1f889aa0a5f08a1f1e1c33ed1f95d61bc449666f831e33c06b6

  • SSDEEP

    384:bgT+GVIgvWlrYxZkFGsSe5WdM/Mqavpac18P5U2Dh+Gi/2aj+oLo8bbNFm2Qu4bL:cT+KY9PFGs5MdMGpX8PAGkj+oL33Y

Score
10/10
mirailzrdbotnetdefense_evasiondiscoveryupx

Malware Config

Extracted

Family

mirai

Botnet

LZRD

Targets

    • Target

      cf4c6564566eddb7a9bd66d94aca00eb80502d4e58d9cad50f6ade33e463aa23.elf

    • Size

      24KB

    • MD5

      2603361b94514242aa12297aa16d8dbd

    • SHA1

      b2d52dfe242b3d0f9427e5354ccab7dfcaf0d321

    • SHA256

      cf4c6564566eddb7a9bd66d94aca00eb80502d4e58d9cad50f6ade33e463aa23

    • SHA512

      b810d07158d300055df202000e585216a379a5630a8f0fe0daad4a8a640743bf505349b0fd2a8df11641c2964ccfbfa482c42661c1a30cecb18afb4c5ca9b551

    • SSDEEP

      768:obrQlS07dEv0UXqUhvQE+CXQKMQKCXBprZqSWvB:4QlS07FUXqIYSXQKqutqJ

    Score
    10/10
    mirailzrdbotnetdefense_evasiondiscovery

    • Mirai

      Mirai is a prevalent Linux malware infecting exposed network devices.

      botnetmirai

    • Mirai family

      mirai

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

      defense_evasion

    • Writes file to system bin folder

    behavioral1

MITRE ATT&CK Enterprise v15

Tasks