General

  • Target

    03d3d027eb7e1987d105195b86deb59a.elf

  • Size

    20KB

  • Sample

    240315-pz8xgage9y

  • MD5

    03d3d027eb7e1987d105195b86deb59a

  • SHA1

    aa2817fecc2e5dba319646edefb580574f8a28e9

  • SHA256

    b009a39865dd2e9e9894ff4e95accddde879607258e858dab2c9734795967dc9

  • SHA512

    de225d29ac7f98bba34ca8951a98d34cbf15c60e343d48638f6f10efb8ae54bbcb129a7c6cc841e2524679da9566ccfdafc3d5ff4ca4a12fd18f1578bf03edb2

  • SSDEEP

    384:Mg9Lpj8s/qPui8uZxoIA57RWQjJiEVi+ZkXadmTb+502F2vwA9dWuMW21bAK1oTt:798o08kxofBE+ZkXaITbp2F2TWul0c5x

Malware Config

Extracted

Family

mirai

Botnet

LZRD

Targets

    • Target

      03d3d027eb7e1987d105195b86deb59a.elf

    • Size

      20KB

    • MD5

      03d3d027eb7e1987d105195b86deb59a

    • SHA1

      aa2817fecc2e5dba319646edefb580574f8a28e9

    • SHA256

      b009a39865dd2e9e9894ff4e95accddde879607258e858dab2c9734795967dc9

    • SHA512

      de225d29ac7f98bba34ca8951a98d34cbf15c60e343d48638f6f10efb8ae54bbcb129a7c6cc841e2524679da9566ccfdafc3d5ff4ca4a12fd18f1578bf03edb2

    • SSDEEP

      384:Mg9Lpj8s/qPui8uZxoIA57RWQjJiEVi+ZkXadmTb+502F2vwA9dWuMW21bAK1oTt:798o08kxofBE+ZkXaITbp2F2TWul0c5x

    Score
    10/10
    • Mirai

      Mirai is a prevalent Linux malware infecting exposed network devices.

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    • Enumerates running processes

      Discovers information about currently running processes on the system

    • Writes file to system bin folder

MITRE ATT&CK Enterprise v15

Tasks