Analysis

  • max time kernel
    131s
  • max time network
    150s
  • platform
    ubuntu-24.04_amd64
  • resource
    ubuntu2404-amd64-20250307-en
  • resource tags

    arch:amd64arch:i386image:ubuntu2404-amd64-20250307-enkernel:6.8.0-31-genericlocale:en-usos:ubuntu-24.04-amd64system
  • submitted
    10/03/2025, 02:22

General

  • Target

    5d86114045619d1d7dffc82a1f9f10ea7d26cdb5759eef8de48642ef4cd1802b.elf

  • Size

    43KB

  • MD5

    bcd4c131acd85c62c41deb575bcd3e59

  • SHA1

    5bfb7a979e878e647002ae34852afba1e40793e9

  • SHA256

    5d86114045619d1d7dffc82a1f9f10ea7d26cdb5759eef8de48642ef4cd1802b

  • SHA512

    88bba909f555f5ba67fc3e1ef14d4e72a2b79e6de79c68f21bd7b328b758bcdd3fa58e10ecae846e01597f2ce3652e654a6173bbcff3b5ae93642c40ed1b51e5

  • SSDEEP

    768:u7Val26HnOx37iu0k0FSA8Aa0EzS5GHjgiyZskrQbEo1lfdDUhuMHTM+TGx072ZJ:uQlDHsLimMnBCS5GDgVZcEonFAhuK6bH

Malware Config

Extracted

Family

mirai

Botnet

LZRD

Signatures

  • Mirai

    Mirai is a prevalent Linux malware infecting exposed network devices.

  • Mirai family
  • Modifies Watchdog functionality 1 TTPs 2 IoCs

    Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

Processes

  • /tmp/5d86114045619d1d7dffc82a1f9f10ea7d26cdb5759eef8de48642ef4cd1802b.elf
    /tmp/5d86114045619d1d7dffc82a1f9f10ea7d26cdb5759eef8de48642ef4cd1802b.elf
    1⤵
    • Modifies Watchdog functionality
    PID:4145

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads