Overview

overview

10

Static

static

5

00a683af92...69.elf

debian-9-mips

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    ba61381aa2f02065a84b093bedb7ff7b.bin

  • Size

    29KB

  • Sample

    250101-b6a25aslbp

  • MD5

    136ef337c9b69753dbf2477f86178355

  • SHA1

    9a4db4e533b1f82ef514b31d9fc2d469b53d2bac

  • SHA256

    0db34ff47a260a84d097c7c46c29d86e4bc5e4ff1ebf59995ba973349c7bc1d1

  • SHA512

    dfe41a7a23b4a1f2f9e4356f2d285e0c4bee2afe3ea19a66a4c4e31c67afac209c9c6c10f336159f85b9c264d0aba0fa1b585ff8b77d5ef8302ef3fbdb18bf03

  • SSDEEP

    768:Eac1lN1XtlNfOLrLDqGNFWdWT6YpmzRZU:if9l8LeGNMwT65zfU

Score
10/10
mirailzrdbotnetdefense_evasiondiscoveryupx

Malware Config

Extracted

Family

mirai

Botnet

LZRD

Targets

    • Target

      00a683af920363be18187b06f45ef5dd1d3e7b3a451155a97e2de295e8740269.elf

    • Size

      30KB

    • MD5

      ba61381aa2f02065a84b093bedb7ff7b

    • SHA1

      a4277e46a6ce63cef670171f3c06bb8783530d09

    • SHA256

      00a683af920363be18187b06f45ef5dd1d3e7b3a451155a97e2de295e8740269

    • SHA512

      3c452ae4956b64521b7dceac3542deb5bf957191eed011d8a7126610d9b2b280412db48b71abbc67b36c46bc8d0863f76b2d8ab74cfd000c5c6544f66b158f79

    • SSDEEP

      768:g/qvfZk5zP1HDd+OMKCqCSeR753zJ0lJgGlzDpbuR1Jf:tvgzPdMOMKCt57lzMVJuJ

    Score
    10/10
    mirailzrdbotnetdefense_evasiondiscovery

    • Mirai

      Mirai is a prevalent Linux malware infecting exposed network devices.

      botnetmirai

    • Mirai family

      mirai

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

      defense_evasion

    • Writes file to system bin folder

    behavioral1

MITRE ATT&CK Enterprise v15

Tasks