General

  • Target

    3f57000340c81869a1625b914bb4f7b0_JC.elf

  • Size

    20KB

  • Sample

    231012-sscggagc5w

  • MD5

    3f57000340c81869a1625b914bb4f7b0

  • SHA1

    6488d2776b5eeb4d3563d5b66c1eaaea6b4df286

  • SHA256

    e62f7d3c0b043124162aa7c4a035f66ec48f0bbf38c6d6c3c994010ccc71acc4

  • SHA512

    ab602ce0998b636ded274f1b720a1d85f1c6705bc8ea81b87d9810317b1754bdcb66622227c289b115923101ac740ede85488521afbd83940a016599a2f994dc

  • SSDEEP

    384:Mg4Lpj8s/qPui8uZxoIA57RWQjJiEVi+ZkXadmTb+502F2vwA9dWuMW21bAK1oTn:M98o08kxofBE+ZkXaITbp2F2TWul0c5r

Malware Config

Extracted

Family

mirai

Botnet

LZRD

Targets

    • Target

      3f57000340c81869a1625b914bb4f7b0_JC.elf

    • Size

      20KB

    • MD5

      3f57000340c81869a1625b914bb4f7b0

    • SHA1

      6488d2776b5eeb4d3563d5b66c1eaaea6b4df286

    • SHA256

      e62f7d3c0b043124162aa7c4a035f66ec48f0bbf38c6d6c3c994010ccc71acc4

    • SHA512

      ab602ce0998b636ded274f1b720a1d85f1c6705bc8ea81b87d9810317b1754bdcb66622227c289b115923101ac740ede85488521afbd83940a016599a2f994dc

    • SSDEEP

      384:Mg4Lpj8s/qPui8uZxoIA57RWQjJiEVi+ZkXadmTb+502F2vwA9dWuMW21bAK1oTn:M98o08kxofBE+ZkXaITbp2F2TWul0c5r

    Score
    10/10
    • Mirai

      Mirai is a prevalent Linux malware infecting exposed network devices.

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    • Writes file to system bin folder

MITRE ATT&CK Enterprise v15

Tasks