Overview

overview

10

Static

static

5

438aa73c7b...68.elf

debian-9-mips

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    71200d52dd36826b19f6d6c298130a3f.bin

  • Size

    26KB

  • Sample

    250111-bk5dvaypcq

  • MD5

    352cfa5b2dbf0752f4cc18189f44396e

  • SHA1

    f9723b330bdae54f5243f8fc8c3c4513e2c06e45

  • SHA256

    6db392c092c5c3698d6bd49a5bda6fd63a836b335036d91028bd43ae8e8485b3

  • SHA512

    b3325545b1acf7ba79ee9c1dfc24d96f6aed5db34ca45bd9e49f6a571d32bf045dcf308919fde75c7301eae88f58ef7ca9a5a8850112497f6a2441e841891f47

  • SSDEEP

    384:xRj/yi31bWVXEJsjpKcjnaGX36xCkgSSyumCh1E2NGzaYt68WRZg+4KG:3ZwVXEy9KczaqKxCVShbCvYzaYOgRt

Score
10/10
mirailzrdbotnetdefense_evasiondiscoveryupx

Malware Config

Extracted

Family

mirai

Botnet

LZRD

Targets

    • Target

      438aa73c7b25359f8f7e32e8946f86695d2968348d3070b6cf8e6fde3fd45268.elf

    • Size

      27KB

    • MD5

      71200d52dd36826b19f6d6c298130a3f

    • SHA1

      314dfad61264473be7368c45286d9ae76358d4cc

    • SHA256

      438aa73c7b25359f8f7e32e8946f86695d2968348d3070b6cf8e6fde3fd45268

    • SHA512

      41628f383208e0a9f3429a57c77b142e400729f85738f7c57d4188da60dda146f71e4c227d2fecef4f64d55770535ff610352f8b690e8d3b0885369b6bb2d527

    • SSDEEP

      768:T5ZSsgv/IkCuLSmFEMWB3l+sEyVJgGlzDpbuR1JQt:VZSs4IkCuJeUslVJuy

    Score
    10/10
    mirailzrdbotnetdefense_evasiondiscovery

    • Mirai

      Mirai is a prevalent Linux malware infecting exposed network devices.

      botnetmirai

    • Mirai family

      mirai

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

      defense_evasion

    • Writes file to system bin folder

    behavioral1

MITRE ATT&CK Enterprise v15

Tasks