General

  • Target

    7210ba71f16aa58736a94e0057031ff3.elf

  • Size

    45KB

  • Sample

    240224-rb4nysdg62

  • MD5

    7210ba71f16aa58736a94e0057031ff3

  • SHA1

    bcdc84c59814e98727c61ead983b7598b5c7f9e0

  • SHA256

    1519dff4f9a55656238bd60bc367a64dbab6457c688e1c8a34bc1e692eee2737

  • SHA512

    7f4c498dca34c31301b65d01e846103af581a5364c2486a84be34417a8e133c31489cae636aecd9c72e26712dd515633ef1bd0984dfd7a3bda26483c6da8c759

  • SSDEEP

    768:S/TYCoIxdEk+AxoTZAZHFeq8b3ew9q3UELbUXfi6nVMQHI4vcGpvQ:SECFd+A6YHAxCLRQZQ

Score
10/10

Malware Config

Extracted

Family

mirai

Botnet

LZRD

Targets

    • Target

      7210ba71f16aa58736a94e0057031ff3.elf

    • Size

      45KB

    • MD5

      7210ba71f16aa58736a94e0057031ff3

    • SHA1

      bcdc84c59814e98727c61ead983b7598b5c7f9e0

    • SHA256

      1519dff4f9a55656238bd60bc367a64dbab6457c688e1c8a34bc1e692eee2737

    • SHA512

      7f4c498dca34c31301b65d01e846103af581a5364c2486a84be34417a8e133c31489cae636aecd9c72e26712dd515633ef1bd0984dfd7a3bda26483c6da8c759

    • SSDEEP

      768:S/TYCoIxdEk+AxoTZAZHFeq8b3ew9q3UELbUXfi6nVMQHI4vcGpvQ:SECFd+A6YHAxCLRQZQ

    Score
    10/10
    • Mirai

      Mirai is a prevalent Linux malware infecting exposed network devices.

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    • Enumerates running processes

      Discovers information about currently running processes on the system

    • Writes file to system bin folder

MITRE ATT&CK Enterprise v15

Tasks