General

  • Target

    de24f4774949e5cde42148fd0c936596.elf

  • Size

    20KB

  • Sample

    230601-vp83dafe39

  • MD5

    de24f4774949e5cde42148fd0c936596

  • SHA1

    2e35a228ca373d4006aa1665ed18c8498167f991

  • SHA256

    14449d6b39eb3440616ea6931ccfb388f01ed5d9800b1cc2061fee282db4898f

  • SHA512

    104d2b279d39d36a643b40f20ab00791f8421901bffbc5cbdeaa7570b88eef3bd4ba93efd3d465e836123c47a7cbdf2faa1b530bd43ceb1ceb700746bb102265

  • SSDEEP

    384:MgWLpj8s/qPui8uZxoIA57RWQjJiEVi+ZkXaQNAr8vcoBAvP+qNV+KLebRtrHSy/:O98o08kxofBE+ZkXaT47C2EpitrN/

Malware Config

Extracted

Family

mirai

Botnet

LZRD

Targets

    • Target

      de24f4774949e5cde42148fd0c936596.elf

    • Size

      20KB

    • MD5

      de24f4774949e5cde42148fd0c936596

    • SHA1

      2e35a228ca373d4006aa1665ed18c8498167f991

    • SHA256

      14449d6b39eb3440616ea6931ccfb388f01ed5d9800b1cc2061fee282db4898f

    • SHA512

      104d2b279d39d36a643b40f20ab00791f8421901bffbc5cbdeaa7570b88eef3bd4ba93efd3d465e836123c47a7cbdf2faa1b530bd43ceb1ceb700746bb102265

    • SSDEEP

      384:MgWLpj8s/qPui8uZxoIA57RWQjJiEVi+ZkXaQNAr8vcoBAvP+qNV+KLebRtrHSy/:O98o08kxofBE+ZkXaT47C2EpitrN/

    Score
    10/10
    • Mirai

      Mirai is a prevalent Linux malware infecting exposed network devices.

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    • Writes file to system bin folder

MITRE ATT&CK Enterprise v6

Tasks