mirai | cbda376a92a2a42ff2bc3e84d0bb2821fb76154c0438482f588a926f3748acc6 | Triage

Sharing

General

Target

8d54eeb2039a1c17e5a4b5179308d0ef.elf
Size

20KB
Sample

230518-ldly2ahb91
MD5

8d54eeb2039a1c17e5a4b5179308d0ef
SHA1

41f4a41a3b88b833ae923825b1f74ee7bd851454
SHA256

cbda376a92a2a42ff2bc3e84d0bb2821fb76154c0438482f588a926f3748acc6
SHA512

fb31a80db2d43d5863f2ca0ead05f36927279e30b259c11afe2b2388a0583223d9ca2d233f26feb33696f6115728011c046724fa5a53c50faf59fcf6bb1a534f
SSDEEP

384:M0DLpj8s/qPui8uZxoIA57RWQjJiEVi+ZkXaQNAr8vcoBAvP+qNV+KLebRtHqDS3:x98o08kxofBE+ZkXaT47C2EpitHGs

Score

10^/10

mirai lzrd botnet linux upx

Malware Config

Extracted

Family

mirai

Botnet

LZRD

Targets

- Target
  
  8d54eeb2039a1c17e5a4b5179308d0ef.elf
- Size
  
  20KB
- MD5
  
  8d54eeb2039a1c17e5a4b5179308d0ef
- SHA1
  
  41f4a41a3b88b833ae923825b1f74ee7bd851454
- SHA256
  
  cbda376a92a2a42ff2bc3e84d0bb2821fb76154c0438482f588a926f3748acc6
- SHA512
  
  fb31a80db2d43d5863f2ca0ead05f36927279e30b259c11afe2b2388a0583223d9ca2d233f26feb33696f6115728011c046724fa5a53c50faf59fcf6bb1a534f
- SSDEEP
  
  384:M0DLpj8s/qPui8uZxoIA57RWQjJiEVi+ZkXaQNAr8vcoBAvP+qNV+KLebRtHqDS3:x98o08kxofBE+ZkXaT47C2EpitHGs
Score

10^/10

mirai lzrd botnet
- Mirai
  Mirai is a prevalent Linux malware infecting exposed network devices.
  botnet mirai
- Modifies Watchdog functionality
  Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.
- Writes file to system bin folder
behavioral1

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Hijack Execution Flow

Privilege Escalation

Hijack Execution Flow

Defense Evasion

Impair Defenses

Hijack Execution Flow

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks

static1

behavioral1

mirailzrdbotnet