Analysis
-
max time kernel
133s -
max time network
138s -
platform
debian-9_mips -
resource
debian9-mipsbe-20240611-en -
resource tags
-
submitted
08/03/2025, 23:16
General
-
Target
morte.mips-20250308-2315.elf
-
Size
49KB
-
MD5
9c0fd01906236c333d9d94ddb2676715
-
SHA1
c2168e4df23154b4abe25c28699f0eccfbb80b3e
-
SHA256
1dcd2049cf629e40a8778e5b614bd1165e4e27f3a5ecfb1397ead00214e6ba07
-
SHA512
d261c8d645be6a30e9468077d05218128fb1fb2a9c8a8ef5ce2c1051efd81c6f1414cf53175cfb02f06f9ef7d65a902e5426524545e595dc194589ce9e8c0bed
-
SSDEEP
1536:HruddsyB4iiQmha1iGEt/cj23/K9k/FmCbVW6VJuj:HqdOyaxQsaQGEte0/An2ZVQj
Score
10/10
Malware Config
Extracted
Family
mirai
Botnet
LZRD
Signatures
-
Mirai
Mirai is a prevalent Linux malware infecting exposed network devices.
-
Mirai family
-
Modifies Watchdog functionality 1 TTPs 2 IoCs
Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.
-
System Network Configuration Discovery 1 TTPs 1 IoCs
Adversaries may gather information about the network configuration of a system.
Processes
-
/tmp/morte.mips-20250308-2315.elf/tmp/morte.mips-20250308-2315.elf1⤵
- Modifies Watchdog functionality
- System Network Configuration Discovery