Overview

overview

10

Static

static

5

dddd0297bf...9d.elf

debian-9-mips

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    dddd0297bf8ac1ce2dc0d245cf8f6a51da0dd26d517fe303db39ee16fdb77d9d.elf

  • Size

    52KB

  • Sample

    250308-r1vgksymy7

  • MD5

    c2dc9681fca49c4e9fe1ccd6fce67cc3

  • SHA1

    ed506e347a8ee0e70083f5f5356f003098f7d6f0

  • SHA256

    dddd0297bf8ac1ce2dc0d245cf8f6a51da0dd26d517fe303db39ee16fdb77d9d

  • SHA512

    0c049c3f96ec76aad9c426ebab596616b43823816db4d5429a668521d3cf41e66ad0cf7264de3df68f5695ae3eaf27cab7f3826f827657080cb070e928474ba6

  • SSDEEP

    1536:KmWckaTl0TK8osGxqscKDR/D8KM6phK8aCcU+lVJuJ:KWEK8Ls7a+K8nYlVQJ

Score
10/10
miraibotnetdefense_evasiondiscoveryupx

Malware Config

Targets

    • Target

      dddd0297bf8ac1ce2dc0d245cf8f6a51da0dd26d517fe303db39ee16fdb77d9d.elf

    • Size

      52KB

    • MD5

      c2dc9681fca49c4e9fe1ccd6fce67cc3

    • SHA1

      ed506e347a8ee0e70083f5f5356f003098f7d6f0

    • SHA256

      dddd0297bf8ac1ce2dc0d245cf8f6a51da0dd26d517fe303db39ee16fdb77d9d

    • SHA512

      0c049c3f96ec76aad9c426ebab596616b43823816db4d5429a668521d3cf41e66ad0cf7264de3df68f5695ae3eaf27cab7f3826f827657080cb070e928474ba6

    • SSDEEP

      1536:KmWckaTl0TK8osGxqscKDR/D8KM6phK8aCcU+lVJuJ:KWEK8Ls7a+K8nYlVQJ

    Score
    10/10
    miraibotnetdefense_evasiondiscovery

    • Mirai

      Mirai is a prevalent Linux malware infecting exposed network devices.

      botnetmirai

    • Mirai family

      mirai

    • Contacts a large (23895) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

      discovery

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

      discovery

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

      defense_evasion
    behavioral1

MITRE ATT&CK Enterprise v15

Tasks