General

  • Target

    506b6bd772cf7c7c626b6e0b2aa1ab3e.elf

  • Size

    24KB

  • Sample

    240321-hdggrsdf32

  • MD5

    506b6bd772cf7c7c626b6e0b2aa1ab3e

  • SHA1

    17d13940a7a4f612253297475402d895d2bb6a72

  • SHA256

    f4460cc2638b270de3f888fe61f4e7709055c00e2e889c27af7ae732fbb5b288

  • SHA512

    fe6ef0a248c5dab5d20efe3d80b2d65b4cc3157f9c7202b8af184f9108e398e27243c602e3bf3501c05cad48afa88a5e845c71de8a911db82e117b9587bb5e9f

  • SSDEEP

    768:obrQlS07dEv0UXqUhvQE+CXQKMQKCXBpSZqSWvQ:4QlS07FUXqIYSXQKqu2qo

Score
10/10

Malware Config

Extracted

Family

mirai

Botnet

LZRD

Targets

    • Target

      506b6bd772cf7c7c626b6e0b2aa1ab3e.elf

    • Size

      24KB

    • MD5

      506b6bd772cf7c7c626b6e0b2aa1ab3e

    • SHA1

      17d13940a7a4f612253297475402d895d2bb6a72

    • SHA256

      f4460cc2638b270de3f888fe61f4e7709055c00e2e889c27af7ae732fbb5b288

    • SHA512

      fe6ef0a248c5dab5d20efe3d80b2d65b4cc3157f9c7202b8af184f9108e398e27243c602e3bf3501c05cad48afa88a5e845c71de8a911db82e117b9587bb5e9f

    • SSDEEP

      768:obrQlS07dEv0UXqUhvQE+CXQKMQKCXBpSZqSWvQ:4QlS07FUXqIYSXQKqu2qo

    Score
    10/10
    • Mirai

      Mirai is a prevalent Linux malware infecting exposed network devices.

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    • Enumerates running processes

      Discovers information about currently running processes on the system

    • Writes file to system bin folder

MITRE ATT&CK Enterprise v15

Tasks