Overview

overview

10

Static

static

5

9bcddc690d...44.elf

debian-9-armhf

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    d3e1dee0e16f2c83a674e001115792ef.bin

  • Size

    54KB

  • Sample

    250101-b6me6azmct

  • MD5

    ffa04642a0b1b78902aebb0555fe076b

  • SHA1

    82e4a0ed104650ea89d78d19ee376a476f3b4758

  • SHA256

    5e2727848a1e2fcd2423aecbdf3ed2a48ca536cc4c439d11348112139ec5a8a8

  • SHA512

    9ccc6c9847425481ae9c70b71d2c090947502d3515a14ddb9ba6683ea4c92ca5a7e38ea14b06066491bacc227a40060372c64d5cbd6c1c33f967d474dc6a2108

  • SSDEEP

    1536:W6s1+TOoUlpYQ//3ocY4kjQmxDH+Q1jqdIrU1tT3:61+T5dewcY4kn0Q1+q8

Score
10/10
mirailzrdbotnetdefense_evasiondiscoveryupx

Malware Config

Extracted

Family

mirai

Botnet

LZRD

Targets

    • Target

      9bcddc690d77a68cdc4068ebc02c367bbc58053f26749a7a820e5d3d34d58c44.elf

    • Size

      54KB

    • MD5

      d3e1dee0e16f2c83a674e001115792ef

    • SHA1

      806f08d4e8813a02f3b45a6986465e0f38225c07

    • SHA256

      9bcddc690d77a68cdc4068ebc02c367bbc58053f26749a7a820e5d3d34d58c44

    • SHA512

      1feae8a01c7f46a2422204282f9b70934add13e577805eeec97b63f4c39bf495c2707b40c7d6211aa2d9dcdf5668fd380e4771400cdfedfe6d8d21cff7d6935e

    • SSDEEP

      1536:4IHiFvo89yZXGH3+0BuSM9LwFFv25L6tBiMvcw:4Xvo89y9QAt9LwvYL23vf

    Score
    10/10
    mirailzrdbotnetdefense_evasiondiscovery

    • Mirai

      Mirai is a prevalent Linux malware infecting exposed network devices.

      botnetmirai

    • Mirai family

      mirai

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

      defense_evasion

    • Enumerates running processes

      Discovers information about currently running processes on the system

    • Writes file to system bin folder

    behavioral1

MITRE ATT&CK Enterprise v15

Tasks