General

  • Target

    adaf2344e288af931dfd6d400ac3568876e275e77c47b02e04c29d265d9c6ff7.elf

  • Size

    23KB

  • Sample

    230514-k9lsgadg21

  • MD5

    b2f350a4fce3ea46e7b849bba0c0557f

  • SHA1

    2b7d3974f7bcef1a277d14f0ff6cc2ba80fb0210

  • SHA256

    adaf2344e288af931dfd6d400ac3568876e275e77c47b02e04c29d265d9c6ff7

  • SHA512

    76fd238d8d15d28943b50219a52ff97431b7a3c8a1505d9c96b1a73ed4292a07eb1a942b1a83a1c6e8ff00c379cd8129b72856ed36cb432f8e5f5541d6ee5c7d

  • SSDEEP

    384:YeD8ZSH2LLZUYyGZbsOiTrowSN9rnZMINlphQ/HYtuidmdtJgGlzDpH7uNj1JA4a:YeD8ZSWvZHZbs1row697qohQvg9ditJF

Score
10/10

Malware Config

Extracted

Family

mirai

Botnet

LZRD

Targets

    • Target

      adaf2344e288af931dfd6d400ac3568876e275e77c47b02e04c29d265d9c6ff7.elf

    • Size

      23KB

    • MD5

      b2f350a4fce3ea46e7b849bba0c0557f

    • SHA1

      2b7d3974f7bcef1a277d14f0ff6cc2ba80fb0210

    • SHA256

      adaf2344e288af931dfd6d400ac3568876e275e77c47b02e04c29d265d9c6ff7

    • SHA512

      76fd238d8d15d28943b50219a52ff97431b7a3c8a1505d9c96b1a73ed4292a07eb1a942b1a83a1c6e8ff00c379cd8129b72856ed36cb432f8e5f5541d6ee5c7d

    • SSDEEP

      384:YeD8ZSH2LLZUYyGZbsOiTrowSN9rnZMINlphQ/HYtuidmdtJgGlzDpH7uNj1JA4a:YeD8ZSWvZHZbs1row697qohQvg9ditJF

    Score
    10/10
    • Mirai

      Mirai is a prevalent Linux malware infecting exposed network devices.

    • Modifies the Watchdog daemon

      Malware like Mirai modify the Watchdog to prevent it restarting an infected system.

    • Writes file to system bin folder

MITRE ATT&CK Matrix ATT&CK v6

Persistence

Hijack Execution Flow

1
T1574

Privilege Escalation

Hijack Execution Flow

1
T1574

Defense Evasion

Impair Defenses

1
T1562

Hijack Execution Flow

1
T1574

Tasks