General

  • Target

    3e52af9db19a2219d051de8e7a579b533974ad23cc8b07c1abf2d05a3870d99b.elf

  • Size

    20KB

  • Sample

    240225-flp3rscg6w

  • MD5

    c9e5528e20ea145f226f0b8e144994bc

  • SHA1

    e0b37a76f542b172e782f4fce815f734e7c02070

  • SHA256

    3e52af9db19a2219d051de8e7a579b533974ad23cc8b07c1abf2d05a3870d99b

  • SHA512

    e5d0f9dfb637f2338524245d086a314c74867fbd3b7e3158a5dcf6253056b3f0daf0d95ef3a71b178d886b030ed1d0d5f49c38a8183cc57d1f428b6863b707e7

  • SSDEEP

    384:MgWLpj8s/qPui8uZxoIA57RWQjJiEVi+ZkXaqOKV14b+502F2vwA9dWuMW21bAKU:O98o08kxofBE+ZkXaqGbp2F2TWul0c5h

Malware Config

Extracted

Family

mirai

Botnet

LZRD

Targets

    • Target

      3e52af9db19a2219d051de8e7a579b533974ad23cc8b07c1abf2d05a3870d99b.elf

    • Size

      20KB

    • MD5

      c9e5528e20ea145f226f0b8e144994bc

    • SHA1

      e0b37a76f542b172e782f4fce815f734e7c02070

    • SHA256

      3e52af9db19a2219d051de8e7a579b533974ad23cc8b07c1abf2d05a3870d99b

    • SHA512

      e5d0f9dfb637f2338524245d086a314c74867fbd3b7e3158a5dcf6253056b3f0daf0d95ef3a71b178d886b030ed1d0d5f49c38a8183cc57d1f428b6863b707e7

    • SSDEEP

      384:MgWLpj8s/qPui8uZxoIA57RWQjJiEVi+ZkXaqOKV14b+502F2vwA9dWuMW21bAKU:O98o08kxofBE+ZkXaqGbp2F2TWul0c5h

    Score
    10/10
    • Mirai

      Mirai is a prevalent Linux malware infecting exposed network devices.

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    • Enumerates running processes

      Discovers information about currently running processes on the system

    • Writes file to system bin folder

MITRE ATT&CK Enterprise v15

Tasks