General

  • Target

    a3aef14f7828e78aecd27314edf09ef4d784bf20969dc5f197cf2733a33607f8.elf

  • Size

    45KB

  • Sample

    231231-qk6dgaaahj

  • MD5

    f24d9e0c750a6f159223ca76b814edb5

  • SHA1

    0ef356cd62c738842d2b302f8732915957598137

  • SHA256

    a3aef14f7828e78aecd27314edf09ef4d784bf20969dc5f197cf2733a33607f8

  • SHA512

    8fb460e48573ae253a0bf7f24f076f780511db88061ebd08eb6d96ca32335dacd73a815f2a38b7ae04183e4bfeff89ea51503c2eccb918e7f50a000bea820c76

  • SSDEEP

    768:D/TYCoIxugQae5pL0qeQvIY1nlzgVWQsUq3UirCUXfi6nVMQHI4vcGpvi:DECFEaULReujwQZi

Score
10/10

Malware Config

Extracted

Family

mirai

Botnet

LZRD

Targets

    • Target

      a3aef14f7828e78aecd27314edf09ef4d784bf20969dc5f197cf2733a33607f8.elf

    • Size

      45KB

    • MD5

      f24d9e0c750a6f159223ca76b814edb5

    • SHA1

      0ef356cd62c738842d2b302f8732915957598137

    • SHA256

      a3aef14f7828e78aecd27314edf09ef4d784bf20969dc5f197cf2733a33607f8

    • SHA512

      8fb460e48573ae253a0bf7f24f076f780511db88061ebd08eb6d96ca32335dacd73a815f2a38b7ae04183e4bfeff89ea51503c2eccb918e7f50a000bea820c76

    • SSDEEP

      768:D/TYCoIxugQae5pL0qeQvIY1nlzgVWQsUq3UirCUXfi6nVMQHI4vcGpvi:DECFEaULReujwQZi

    Score
    10/10
    • Mirai

      Mirai is a prevalent Linux malware infecting exposed network devices.

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    • Enumerates running processes

      Discovers information about currently running processes on the system

    • Writes file to system bin folder

MITRE ATT&CK Enterprise v15

Tasks