General
-
Target
b0d4c5f574262235ac9b84f14ab01c858aed158598ac0eac7b9c1197921429e6.elf
-
Size
69KB
-
Sample
250131-eze92szrbj
-
MD5
06a0e480553dcba02700112a8baaf7a0
-
SHA1
414940006664c111fcc85af639e20384abd91a0e
-
SHA256
b0d4c5f574262235ac9b84f14ab01c858aed158598ac0eac7b9c1197921429e6
-
SHA512
9fee8b4c2083a18e96a025c04aea3dd640ed2490e3ffaa05edfa588e1600496c9e7554e2db2657292eb08afa0be75f73eda1db1dd0ab013ec6d346bfadcc160b
-
SSDEEP
1536:wUfDlg8BuA1D+v49jqIRWlXianBELKUngyZHsRrAWSC:wULlg8BuAWOUlXDnBHUn3ZMtV
Behavioral task
behavioral1
Sample
b0d4c5f574262235ac9b84f14ab01c858aed158598ac0eac7b9c1197921429e6.elf
Resource
ubuntu2204-amd64-20240611-en
Malware Config
Extracted
mirai
UNSTABLE
dkdrlahhwlxptmxm2.p-e.kr
Targets
-
-
Target
b0d4c5f574262235ac9b84f14ab01c858aed158598ac0eac7b9c1197921429e6.elf
-
Size
69KB
-
MD5
06a0e480553dcba02700112a8baaf7a0
-
SHA1
414940006664c111fcc85af639e20384abd91a0e
-
SHA256
b0d4c5f574262235ac9b84f14ab01c858aed158598ac0eac7b9c1197921429e6
-
SHA512
9fee8b4c2083a18e96a025c04aea3dd640ed2490e3ffaa05edfa588e1600496c9e7554e2db2657292eb08afa0be75f73eda1db1dd0ab013ec6d346bfadcc160b
-
SSDEEP
1536:wUfDlg8BuA1D+v49jqIRWlXianBELKUngyZHsRrAWSC:wULlg8BuAWOUlXDnBHUn3ZMtV
-
File and Directory Permissions Modification
Adversaries may modify file or directory permissions to evade defenses.
-
Deletes itself
-
Creates/modifies environment variables
Creating/modifying environment variables is a common persistence mechanism.
-
Modifies systemd
Adds/ modifies systemd service files. Likely to achieve persistence.
-
Modifies Bash startup script
-
MITRE ATT&CK Enterprise v15
Persistence
Boot or Logon Autostart Execution
4XDG Autostart Entries
1Boot or Logon Initialization Scripts
2RC Scripts
2Create or Modify System Process
1Systemd Service
1Event Triggered Execution
1Unix Shell Configuration Modification
1Hijack Execution Flow
1Path Interception by PATH Environment Variable
1Privilege Escalation
Boot or Logon Autostart Execution
4XDG Autostart Entries
1Boot or Logon Initialization Scripts
2RC Scripts
2Create or Modify System Process
1Systemd Service
1Event Triggered Execution
1Unix Shell Configuration Modification
1Hijack Execution Flow
1Path Interception by PATH Environment Variable
1