General

  • Target

    b29cdd381e850d9209e005dc4c9ce47d30c30513cb260e55cc3facf02e2c8a4d.elf

  • Size

    45KB

  • Sample

    240322-dr5pasfh24

  • MD5

    0c3e4c57c28640c19feffdbb91fd81d5

  • SHA1

    61f83dcd4cdddb7f1f7220160dd1fcf686d4335e

  • SHA256

    b29cdd381e850d9209e005dc4c9ce47d30c30513cb260e55cc3facf02e2c8a4d

  • SHA512

    01cb55be7d870bb35c819fd4a12e9e4d743da1630effe29cecf97f55a18958311af2dee1b7e1600b601fb27c1d5040d38af138cc3274bda483102876233643e4

  • SSDEEP

    768:g/TYCoIxdEk+AxoTZAZHFeq8b3R9q3UELbUXfi6nVMQHI4vcGpvy:gECFd+A6YHAxELRQZy

Score
10/10

Malware Config

Extracted

Family

mirai

Botnet

LZRD

Targets

    • Target

      b29cdd381e850d9209e005dc4c9ce47d30c30513cb260e55cc3facf02e2c8a4d.elf

    • Size

      45KB

    • MD5

      0c3e4c57c28640c19feffdbb91fd81d5

    • SHA1

      61f83dcd4cdddb7f1f7220160dd1fcf686d4335e

    • SHA256

      b29cdd381e850d9209e005dc4c9ce47d30c30513cb260e55cc3facf02e2c8a4d

    • SHA512

      01cb55be7d870bb35c819fd4a12e9e4d743da1630effe29cecf97f55a18958311af2dee1b7e1600b601fb27c1d5040d38af138cc3274bda483102876233643e4

    • SSDEEP

      768:g/TYCoIxdEk+AxoTZAZHFeq8b3R9q3UELbUXfi6nVMQHI4vcGpvy:gECFd+A6YHAxELRQZy

    Score
    10/10
    • Mirai

      Mirai is a prevalent Linux malware infecting exposed network devices.

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    • Enumerates running processes

      Discovers information about currently running processes on the system

    • Writes file to system bin folder

MITRE ATT&CK Enterprise v15

Tasks