Overview

overview

10

Static

static

5

98e5634d3a...6c.elf

debian-12-mipsel

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    8b4beb13f7163c0bdfc10a573f22d202.bin

  • Size

    23KB

  • Sample

    250101-btt98syrey

  • MD5

    fdd361e2aba73cad60a5ce95c5885374

  • SHA1

    181110e11114671a999fdbde2410610bda6a27a2

  • SHA256

    1712683bcb24f8960fe4e934bccb42f9db9821e9bcdb7e7cdacc009608b5771f

  • SHA512

    4695e9c988f1f9f047a6f784804eae7ebd2995e19d6367a6caa85ed066c72c6aba57a6a83ba2d9efd3d120a580858a3f103ef6b520d0cddad9eeb749d21e9de1

  • SSDEEP

    384:pz4M/i0e9Fd/xccqEpgkGVR8mrW1MlOu0k/iNZrdr4MNvTyoOCI:J4eilJccqPkGVR8ma1SOufi/dr46q

Score
10/10
mirailzrdbotnetdefense_evasiondiscoveryupx

Malware Config

Extracted

Family

mirai

Botnet

LZRD

Targets

    • Target

      98e5634d3ac10b50b0bdeb0f925d98201c10c9743a829125d7f323b5b28b486c.elf

    • Size

      24KB

    • MD5

      8b4beb13f7163c0bdfc10a573f22d202

    • SHA1

      41f4ff8938e7ebe5967e66d640bf4bbc358b913d

    • SHA256

      98e5634d3ac10b50b0bdeb0f925d98201c10c9743a829125d7f323b5b28b486c

    • SHA512

      6fb1faa63b736adc50edd7355baa9c2405b9d201f575ae068f9f1666988fdf67d8dfb524f426bea5f5b566c97e01930858c519ae9b627ec7171088ff2312072e

    • SSDEEP

      768:oCrQlS07dEv0UXqUhvQE+CXQKMQKCXBpeZqEWvN:/QlS07FUXqIYSXQKquyqz

    Score
    10/10
    mirailzrdbotnetdefense_evasiondiscovery

    • Mirai

      Mirai is a prevalent Linux malware infecting exposed network devices.

      botnetmirai

    • Mirai family

      mirai

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

      defense_evasion

    • Writes file to system bin folder

    behavioral1

MITRE ATT&CK Enterprise v15

Tasks