General

  • Target

    14707f78b2c4d3a8c9bd990bd3e4da107241dc078194e2d170cbabf15024b2b5_JC.elf

  • Size

    20KB

  • Sample

    231010-vv19qaeg81

  • MD5

    f0f0f59f099e1c4139122b3c5bffcc64

  • SHA1

    2df9b1f0e927469209370339a9c469b004f1f6d7

  • SHA256

    14707f78b2c4d3a8c9bd990bd3e4da107241dc078194e2d170cbabf15024b2b5

  • SHA512

    a70447a44c3f606360487f0c6936612b13acf50bbc7a93c2ca1c82dfb7f2c4003c648df729c24da3b5e3852a9f958779433af4ed30964afa534228748064ecea

  • SSDEEP

    384:MgWLpj8s/qPui8uZxoIA57RWQjJiEVi+ZkXadmTb+502F2vwA9dWuMW21bAK1oTv:O98o08kxofBE+ZkXaITbp2F2TWul0c5r

Malware Config

Extracted

Family

mirai

Botnet

LZRD

Targets

    • Target

      14707f78b2c4d3a8c9bd990bd3e4da107241dc078194e2d170cbabf15024b2b5_JC.elf

    • Size

      20KB

    • MD5

      f0f0f59f099e1c4139122b3c5bffcc64

    • SHA1

      2df9b1f0e927469209370339a9c469b004f1f6d7

    • SHA256

      14707f78b2c4d3a8c9bd990bd3e4da107241dc078194e2d170cbabf15024b2b5

    • SHA512

      a70447a44c3f606360487f0c6936612b13acf50bbc7a93c2ca1c82dfb7f2c4003c648df729c24da3b5e3852a9f958779433af4ed30964afa534228748064ecea

    • SSDEEP

      384:MgWLpj8s/qPui8uZxoIA57RWQjJiEVi+ZkXadmTb+502F2vwA9dWuMW21bAK1oTv:O98o08kxofBE+ZkXaITbp2F2TWul0c5r

    Score
    10/10
    • Mirai

      Mirai is a prevalent Linux malware infecting exposed network devices.

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    • Writes file to system bin folder

MITRE ATT&CK Enterprise v15

Tasks