Overview

overview

10

Static

static

5

90d543a102...c2.elf

debian-9-mipsel

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    90d543a1027b33b457f943571be902751cdc9b60a86ac9eacde19843e34ca8c2.elf

  • Size

    43KB

  • Sample

    250308-ncpdwawlz4

  • MD5

    37e3f1e3faf28800d5d6e75a7ab8c39a

  • SHA1

    c3e2b8841298415d70333c2ef1351c5b27afc45e

  • SHA256

    90d543a1027b33b457f943571be902751cdc9b60a86ac9eacde19843e34ca8c2

  • SHA512

    ab1397c7bd0ebe4ee76e16177adbc3ce5b2437b7f4ff68911cf1d07b7f11cb7556ab5dffe51e761169ec91df767d766360b376051afdfc7a46c8fd25850d6164

  • SSDEEP

    768:E1jRTSWuPUdOfcVy3t9g44uuyBDmzii5HaPSkIx9RIXvtTPsAb3bqOWS:E1dTSlYvVMt9gtuSNaKBx9RYdbrN

Score
10/10
miraibotnetdefense_evasiondiscoveryupx

Malware Config

Targets

    • Target

      90d543a1027b33b457f943571be902751cdc9b60a86ac9eacde19843e34ca8c2.elf

    • Size

      43KB

    • MD5

      37e3f1e3faf28800d5d6e75a7ab8c39a

    • SHA1

      c3e2b8841298415d70333c2ef1351c5b27afc45e

    • SHA256

      90d543a1027b33b457f943571be902751cdc9b60a86ac9eacde19843e34ca8c2

    • SHA512

      ab1397c7bd0ebe4ee76e16177adbc3ce5b2437b7f4ff68911cf1d07b7f11cb7556ab5dffe51e761169ec91df767d766360b376051afdfc7a46c8fd25850d6164

    • SSDEEP

      768:E1jRTSWuPUdOfcVy3t9g44uuyBDmzii5HaPSkIx9RIXvtTPsAb3bqOWS:E1dTSlYvVMt9gtuSNaKBx9RYdbrN

    Score
    10/10
    miraibotnetdefense_evasiondiscovery

    • Mirai

      Mirai is a prevalent Linux malware infecting exposed network devices.

      botnetmirai

    • Mirai family

      mirai

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

      defense_evasion

    • Enumerates running processes

      Discovers information about currently running processes on the system

    • Writes file to system bin folder

    behavioral1

MITRE ATT&CK Enterprise v15

Tasks