General

  • Target

    b0a8e401c574d0b75f95a4d134bbbac6.elf

  • Size

    24KB

  • Sample

    240325-lpw85scd45

  • MD5

    b0a8e401c574d0b75f95a4d134bbbac6

  • SHA1

    21039441a5aaeed9e890345a17b4cbd6bb68f262

  • SHA256

    07ff0a6d179224d57aad6f733e187dae4b1126627722679aa25274aa5a01cf4f

  • SHA512

    80e020e30b33833a90b932d14ef0e28a313486d981a119d4fdb2a8e36d65b8f399f006992fc1b95c20be1c8416b90d02bb304210cb3eb25ad52653b0b1001abd

  • SSDEEP

    768:c4rQlS07dEv0UXqUhvQE+CXQKMQKCXBpx9Zq8Wve:BQlS07FUXqIYSXQKqu5qw

Score
10/10

Malware Config

Extracted

Family

mirai

Botnet

LZRD

Targets

    • Target

      b0a8e401c574d0b75f95a4d134bbbac6.elf

    • Size

      24KB

    • MD5

      b0a8e401c574d0b75f95a4d134bbbac6

    • SHA1

      21039441a5aaeed9e890345a17b4cbd6bb68f262

    • SHA256

      07ff0a6d179224d57aad6f733e187dae4b1126627722679aa25274aa5a01cf4f

    • SHA512

      80e020e30b33833a90b932d14ef0e28a313486d981a119d4fdb2a8e36d65b8f399f006992fc1b95c20be1c8416b90d02bb304210cb3eb25ad52653b0b1001abd

    • SSDEEP

      768:c4rQlS07dEv0UXqUhvQE+CXQKMQKCXBpx9Zq8Wve:BQlS07FUXqIYSXQKqu5qw

    Score
    10/10
    • Mirai

      Mirai is a prevalent Linux malware infecting exposed network devices.

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    • Writes file to system bin folder

MITRE ATT&CK Enterprise v15

Tasks