General

  • Target

    86b65f5f4e56ce09cafae8be5f22583e.bin

  • Size

    23KB

  • Sample

    230531-bxk6qscg4y

  • MD5

    48d660bd341a6b08444009b91e259f5c

  • SHA1

    46eb4c3cd2d292a885d20ab425236cca188af6d6

  • SHA256

    b83fad205f5d30db6428dea8a1db8a2f9a7fe46cf5c6a29d4515f2b91feb50b8

  • SHA512

    dc4951adb67873b2921c27380f01b354df36001d811ab98db0035405bc6f7d30eef711ac182e293c92316971d8bdb5b6dbf422b4a3978d776e214f8f9689537a

  • SSDEEP

    384:QaVv9p39W1fYlMQY42Z/q7XUnskExkb2QI7OJ4309W0Rafocv1czse7X9jymHl:QaR9p3AalM9xyzUnykdgo5afocv1Ssen

Score
10/10

Malware Config

Extracted

Family

mirai

Botnet

LZRD

Targets

    • Target

      9f96a05683072a991a6a681503e3acdab83206713f4500b5fba60f69aef20174.elf

    • Size

      24KB

    • MD5

      86b65f5f4e56ce09cafae8be5f22583e

    • SHA1

      b6b57514452caa29f35c1454e7c63f708ca18391

    • SHA256

      9f96a05683072a991a6a681503e3acdab83206713f4500b5fba60f69aef20174

    • SHA512

      92c90b36a6c54ddb9aaa90f33fc7cd7a84c67aeb0f4ccea6d89138c97e2308ed20e82999b805a8c4eb347ead70472a6d91aaf46c123f3530424b3edc25ff5cc2

    • SSDEEP

      768:kLgJwgaM3cCK1oPTZQwG+Xx5EjBCIgY7unQWF:kq4fYtrXCcnn

    Score
    10/10
    • Mirai

      Mirai is a prevalent Linux malware infecting exposed network devices.

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    • Writes file to system bin folder

MITRE ATT&CK Enterprise v6

Tasks