General

  • Target

    d1270dee24360bdf1bd5c039fb371ba0.bin

  • Size

    23KB

  • Sample

    240101-cjjw7aceb5

  • MD5

    8f7259a5747188f43d7b9e12534cc40f

  • SHA1

    a7f07cd96747efee8e5765c7ef59a21a3cc0bd0f

  • SHA256

    4110b29d6728e1413d0c22cf9b4d116eb22d7ff351e0a321df769c1812470d40

  • SHA512

    a6cf4e231f55681c8489927202db704e0b4f171d8a166e359d9cdca2ec2fef6f240d70497260a3450e0a7468aaf0d637019a10d3909b1aacd8a98434502e19ac

  • SSDEEP

    384:pLHrfQwacFFgvuVFwq3CnMJ7btqIvBysI6xH3Gj7RC93EkMq6raBIxJP5Qh0QNee:dbQwfFR6sFtGBC9Uk/B8JPUVWQ

Score
10/10

Malware Config

Extracted

Family

mirai

Botnet

LZRD

Targets

    • Target

      4c95add6f9bb0e2a230d1fe7546cfecfb9915e4455cc9391899a5332a19c72a2.elf

    • Size

      24KB

    • MD5

      d1270dee24360bdf1bd5c039fb371ba0

    • SHA1

      eabc5b418b57bd0f4efe48405a4a034e47403919

    • SHA256

      4c95add6f9bb0e2a230d1fe7546cfecfb9915e4455cc9391899a5332a19c72a2

    • SHA512

      b2bd615ab9fc574053721f6a9c500055d9debeb028c73819615ffd7df9339a16d4b778f967890f7ed0f56449c46ebfbcaf9cc65b10f82795418ac2aae8a42921

    • SSDEEP

      768:obrQlS07dEv0UXqUhvQE+CXQKMQKCXBpXZqSWv+:4QlS07FUXqIYSXQKqupqG

    Score
    10/10
    • Mirai

      Mirai is a prevalent Linux malware infecting exposed network devices.

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    • Enumerates running processes

      Discovers information about currently running processes on the system

    • Writes file to system bin folder

MITRE ATT&CK Enterprise v15

Tasks