Overview

overview

10

Static

static

5

9edcacfbfb...7c.elf

debian-12-mipsel

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    e30368ed86531051ae95d0ba79d33d7e.bin

  • Size

    31KB

  • Sample

    250101-b9y85aznc1

  • MD5

    ca268a38fb8454fcf9183eaf67686d7f

  • SHA1

    4f5614ba1a2eb5e1f2db423fa0885890796b984f

  • SHA256

    9516c5240a2f54f549bdf7aed74e7525b53680f17d5c07ed95ecf85bbeca56b6

  • SHA512

    afe082ab3edc6fef6d398d7ea92ed9a99a45bc29da2b83a961d5177846375e60d8a0afda41ce15f49263dafbd971b3288816ca4e06181d054ddf190df382374b

  • SSDEEP

    768:Gpihy9BXxidG+7nKGi/o4vpE+Tc1caP94iB24HCCj:7+XxORP4vpJo1GikNG

Score
10/10
mirailzrdbotnetdefense_evasiondiscoveryupx

Malware Config

Extracted

Family

mirai

Botnet

LZRD

Targets

    • Target

      9edcacfbfbb25cd2864e431738ec6d8085b5ec241400943b4cc2c9ea7a2fe67c.elf

    • Size

      32KB

    • MD5

      e30368ed86531051ae95d0ba79d33d7e

    • SHA1

      cb69227ff998e24c588e67968e6c38437b939524

    • SHA256

      9edcacfbfbb25cd2864e431738ec6d8085b5ec241400943b4cc2c9ea7a2fe67c

    • SHA512

      740d00a37517473848c32c8dc957f1974c801f9279ccbc83ffcaea89ed1c94b292d6e52540565c819f88eb9c7ddc1634e116685c7063f7f7a459c5c100a2f795

    • SSDEEP

      768:Xky7pBOnQthzk8Ya7Fb4ARL1wZK8wTSWujfLm6Wa:Upn4z9Ygb4A51b477L7

    Score
    10/10
    mirailzrdbotnetdefense_evasiondiscovery

    • Mirai

      Mirai is a prevalent Linux malware infecting exposed network devices.

      botnetmirai

    • Mirai family

      mirai

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

      defense_evasion

    • Writes file to system bin folder

    behavioral1

MITRE ATT&CK Enterprise v15

Tasks