Overview

overview

10

Static

static

5

c02c87dfe2...c4.elf

debian-9-mips

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    5d6258afa5f961b3fa073a1600f092af.bin

  • Size

    22KB

  • Sample

    250111-bgyrwsynar

  • MD5

    e37c79e7cb8e40d202c8b86c1072cc14

  • SHA1

    cf70f86fc83d58a8acd8daeabf249b4834577428

  • SHA256

    69c8beee9353928dbb3747070baa6e41a2eede44f7a08f2c072c2b97a473cfa2

  • SHA512

    be87d2378b029ba755ee783abfb7b5bac0c2e08eb2ccc84df724b7818387da52f65332131523c96e0de937c5969cb11ca0162e01c65e5785c2c8dd16ecc5d19f

  • SSDEEP

    384:9PuAf+wdPgz41AcblBx+eqn4m7k8NnCiuwzS+wDZ5dC62vycd6MmtTSDhC:9t+y1Nblw/QZlV5dC62vywzmte8

Score
10/10
mirailzrdbotnetdefense_evasiondiscoveryupx

Malware Config

Extracted

Family

mirai

Botnet

LZRD

Targets

    • Target

      c02c87dfe25f0bb6160d1a59de44d56fd336caff5fbf7216203c54f4991a38c4.elf

    • Size

      23KB

    • MD5

      5d6258afa5f961b3fa073a1600f092af

    • SHA1

      ecf5abcc547b8f37500e54f28158087c511fdbac

    • SHA256

      c02c87dfe25f0bb6160d1a59de44d56fd336caff5fbf7216203c54f4991a38c4

    • SHA512

      c5b305380a3ad2f923d656b3bbe68227be9ba92d55abd665e7b44f2e35380a6967f9d2cb6a5a90e1dec6b300896510adb8c160652cc29f059966d08ad89f2782

    • SSDEEP

      384:YeD8ZSH2LLZUYyGZbsOiTrowSN9rnZMINlphQ/HYtuiCXdTmdtJgGlzDpH7uNj1n:YeD8ZSWvZHZbs1row697qohQvg9GitJ8

    Score
    10/10
    mirailzrdbotnetdefense_evasiondiscovery

    • Mirai

      Mirai is a prevalent Linux malware infecting exposed network devices.

      botnetmirai

    • Mirai family

      mirai

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

      defense_evasion

    • Writes file to system bin folder

    behavioral1

MITRE ATT&CK Enterprise v15

Tasks