General

  • Target

    d803af620ecf81903a7dc1b2dd9da0b9.elf

  • Size

    24KB

  • Sample

    240308-11mamsgh65

  • MD5

    d803af620ecf81903a7dc1b2dd9da0b9

  • SHA1

    13787adf7327263ec1ac38834ed3c73003eeae73

  • SHA256

    1719318a4bfc813aea13c088ec5e42dec788fbdc8568e18d02839dfd9035b0f5

  • SHA512

    1c7e7d3abd179ace8ee4b2d54eeab241a3be7ed985053694ba35021c2e945be608b18caa55daaa78f56852ecca298b2f78e18124e97020b4f96f713650e550ac

  • SSDEEP

    768:obrQlS07dEv0UXqUhvQE+CXQKMQKCXBp8cZqSWvb:4QlS07FUXqIYSXQKquDqz

Score
10/10

Malware Config

Extracted

Family

mirai

Botnet

LZRD

Targets

    • Target

      d803af620ecf81903a7dc1b2dd9da0b9.elf

    • Size

      24KB

    • MD5

      d803af620ecf81903a7dc1b2dd9da0b9

    • SHA1

      13787adf7327263ec1ac38834ed3c73003eeae73

    • SHA256

      1719318a4bfc813aea13c088ec5e42dec788fbdc8568e18d02839dfd9035b0f5

    • SHA512

      1c7e7d3abd179ace8ee4b2d54eeab241a3be7ed985053694ba35021c2e945be608b18caa55daaa78f56852ecca298b2f78e18124e97020b4f96f713650e550ac

    • SSDEEP

      768:obrQlS07dEv0UXqUhvQE+CXQKMQKCXBp8cZqSWvb:4QlS07FUXqIYSXQKquDqz

    Score
    10/10
    • Mirai

      Mirai is a prevalent Linux malware infecting exposed network devices.

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    • Writes file to system bin folder

MITRE ATT&CK Enterprise v15

Tasks