General

  • Target

    a71be073ca2fd00cdfa663ba76fd6fa46770b53ebe1368992758120d7be4b4fd.elf

  • Size

    21KB

  • Sample

    240223-f51nlscd72

  • MD5

    915eca335c37b2b8264426b8c39f0278

  • SHA1

    3bfe78cd4c2c732cb66b6a4bcd782463f02b5a8c

  • SHA256

    a71be073ca2fd00cdfa663ba76fd6fa46770b53ebe1368992758120d7be4b4fd

  • SHA512

    ba462558a06f370b6381c6d055b59a85622462f3bb2c97ea3688bbc5992cd87cf66c1d8b10b7604878712861eaa5557e6305acd679493e547fa8df9c6a56356b

  • SSDEEP

    384:vvtIoZxrSniaXs+qx+bwqPX+VOcFd5fHq52lxjChymdGUop5hP:vvQn4j+ZO5fKAlx2s3Uozp

Score
10/10

Malware Config

Extracted

Family

mirai

Botnet

LZRD

Targets

    • Target

      a71be073ca2fd00cdfa663ba76fd6fa46770b53ebe1368992758120d7be4b4fd.elf

    • Size

      21KB

    • MD5

      915eca335c37b2b8264426b8c39f0278

    • SHA1

      3bfe78cd4c2c732cb66b6a4bcd782463f02b5a8c

    • SHA256

      a71be073ca2fd00cdfa663ba76fd6fa46770b53ebe1368992758120d7be4b4fd

    • SHA512

      ba462558a06f370b6381c6d055b59a85622462f3bb2c97ea3688bbc5992cd87cf66c1d8b10b7604878712861eaa5557e6305acd679493e547fa8df9c6a56356b

    • SSDEEP

      384:vvtIoZxrSniaXs+qx+bwqPX+VOcFd5fHq52lxjChymdGUop5hP:vvQn4j+ZO5fKAlx2s3Uozp

    Score
    10/10
    • Mirai

      Mirai is a prevalent Linux malware infecting exposed network devices.

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    • Enumerates running processes

      Discovers information about currently running processes on the system

    • Writes file to system bin folder

MITRE ATT&CK Matrix ATT&CK v13

Persistence

Hijack Execution Flow

1
T1574

Privilege Escalation

Hijack Execution Flow

1
T1574

Defense Evasion

Impair Defenses

1
T1562

Hijack Execution Flow

1
T1574

Tasks