General

  • Target

    29bdc8e7d7c5f3d2f0a808d281c77738.elf

  • Size

    45KB

  • Sample

    240316-bp4ccagd5v

  • MD5

    29bdc8e7d7c5f3d2f0a808d281c77738

  • SHA1

    ff23cc39f2655f4433b0bc64d8f6088bde6171d4

  • SHA256

    2fac22032d4a5d676660fd11e0ccd8c8d01d2f04f90a7612f3502e6595b5d772

  • SHA512

    b95f447db26b42fbfbaff6c92005d9b3d748762f1f28c273a386c6ca88b8326b6131fba6747c6dd2c238f9c96d4186022ac48e426d3d76b8333ccade7860f2ac

  • SSDEEP

    768:g/TYCoIxdEk+AxoTZAZHFeq8b3e9q3UELbUXfi6nVMQHI4vcGpvu:gECFd+A6YHAxDLRQZu

Score
10/10

Malware Config

Extracted

Family

mirai

Botnet

LZRD

Targets

    • Target

      29bdc8e7d7c5f3d2f0a808d281c77738.elf

    • Size

      45KB

    • MD5

      29bdc8e7d7c5f3d2f0a808d281c77738

    • SHA1

      ff23cc39f2655f4433b0bc64d8f6088bde6171d4

    • SHA256

      2fac22032d4a5d676660fd11e0ccd8c8d01d2f04f90a7612f3502e6595b5d772

    • SHA512

      b95f447db26b42fbfbaff6c92005d9b3d748762f1f28c273a386c6ca88b8326b6131fba6747c6dd2c238f9c96d4186022ac48e426d3d76b8333ccade7860f2ac

    • SSDEEP

      768:g/TYCoIxdEk+AxoTZAZHFeq8b3e9q3UELbUXfi6nVMQHI4vcGpvu:gECFd+A6YHAxDLRQZu

    Score
    10/10
    • Mirai

      Mirai is a prevalent Linux malware infecting exposed network devices.

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    • Enumerates running processes

      Discovers information about currently running processes on the system

    • Writes file to system bin folder

MITRE ATT&CK Enterprise v15

Tasks