Analysis

  • max time kernel
    132s
  • max time network
    150s
  • platform
    debian-9_mips
  • resource
    debian9-mipsbe-20240611-en
  • resource tags

    arch:mipsimage:debian9-mipsbe-20240611-enkernel:4.9.0-13-4kc-maltalocale:en-usos:debian-9-mipssystem
  • submitted
    10/03/2025, 02:55

General

  • Target

    d7a02a5ecb37d070be945fd48209caa3fa9e7a7f4976513103a8e6e3466cbe37.elf

  • Size

    45KB

  • MD5

    71a5e58e65367b702874f4bca763afe8

  • SHA1

    c87770e9aee63c5b27b72237f141ac366d2a3720

  • SHA256

    d7a02a5ecb37d070be945fd48209caa3fa9e7a7f4976513103a8e6e3466cbe37

  • SHA512

    ceb59ec33b5c99de91f83db3439ef4d3e2a97cea5ce737dd3bc5846f5bb6feefef928ea09c13263b833513d2760b0048392c5b0df8ebdb8f0c51dbb51db6fea9

  • SSDEEP

    768:DKpIuUfh7mGZSrbvzq3maq6VH98Utf/oliKjoJdyRw15M/JfJgGlzDpbuR1Jc:+i7mGk0RT9oaiRw1+/HVJuC

Malware Config

Extracted

Family

mirai

Botnet

LZRD

Signatures

  • Mirai

    Mirai is a prevalent Linux malware infecting exposed network devices.

  • Mirai family
  • Modifies Watchdog functionality 1 TTPs 2 IoCs

    Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

Processes

  • /tmp/d7a02a5ecb37d070be945fd48209caa3fa9e7a7f4976513103a8e6e3466cbe37.elf
    /tmp/d7a02a5ecb37d070be945fd48209caa3fa9e7a7f4976513103a8e6e3466cbe37.elf
    1⤵
    • Modifies Watchdog functionality
    PID:702

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads