Overview

overview

10

Static

static

5

68dddc312c...47.elf

debian-9-mipsel

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    68dddc312cd7d0743877f35103aad42e821fa0ab41cd3db1df05f4236eedd747.elf

  • Size

    51KB

  • Sample

    250307-fgca4stzay

  • MD5

    3889c3f36b4f6aed4948532f53a3b973

  • SHA1

    3174dd375921f3b5192f5171c4d9a4d78c74c14a

  • SHA256

    68dddc312cd7d0743877f35103aad42e821fa0ab41cd3db1df05f4236eedd747

  • SHA512

    05851221f4eed17d069e67886aa67f151a9f9d06e2f17409b78ed3f7f450967ab441903228d0da8585038a71e2e9344adc6124689bc7952127c3b82dfccbf5cc

  • SSDEEP

    1536:pL8gWi65+z9CS3/vudtf9MJnAgjc2ZFJyBAAUby:N8gWi6U5+dtlMnAgjc2ZbyBtB

Score
10/10
miraibotnetdefense_evasiondiscoveryupx

Malware Config

Targets

    • Target

      68dddc312cd7d0743877f35103aad42e821fa0ab41cd3db1df05f4236eedd747.elf

    • Size

      51KB

    • MD5

      3889c3f36b4f6aed4948532f53a3b973

    • SHA1

      3174dd375921f3b5192f5171c4d9a4d78c74c14a

    • SHA256

      68dddc312cd7d0743877f35103aad42e821fa0ab41cd3db1df05f4236eedd747

    • SHA512

      05851221f4eed17d069e67886aa67f151a9f9d06e2f17409b78ed3f7f450967ab441903228d0da8585038a71e2e9344adc6124689bc7952127c3b82dfccbf5cc

    • SSDEEP

      1536:pL8gWi65+z9CS3/vudtf9MJnAgjc2ZFJyBAAUby:N8gWi6U5+dtlMnAgjc2ZbyBtB

    Score
    10/10
    miraibotnetdefense_evasiondiscovery

    • Mirai

      Mirai is a prevalent Linux malware infecting exposed network devices.

      botnetmirai

    • Mirai family

      mirai

    • Contacts a large (22795) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

      discovery

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

      discovery

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

      defense_evasion
    behavioral1

MITRE ATT&CK Enterprise v15

Tasks