General

  • Target

    00940a6466ffdd660a5cfceec98a74d8.elf

  • Size

    20KB

  • Sample

    240325-lqgvvafd5t

  • MD5

    00940a6466ffdd660a5cfceec98a74d8

  • SHA1

    9673c3ab07684916584fdbce3b5dc4e1e5645533

  • SHA256

    37abd9ae1ce97738f9e0b116d887603f5533863cac6b881dd048445b1f96d1d1

  • SHA512

    aedff14a60291146b8e3c18751459c501f3851e42728eccb5cd48a775b6e8c769100bb5798c4c739ce6b9027c18078cb9edc335cb948ee2493599d6e25b3422e

  • SSDEEP

    384:M0DLpj8s/qPui8uZxoIA57RWQjJiEVi+ZkXaqOKV14b+502F2vwA9dWuMW21bAK5:x98o08kxofBE+ZkXaqGbp2F2TWul0c5M

Malware Config

Extracted

Family

mirai

Botnet

LZRD

Targets

    • Target

      00940a6466ffdd660a5cfceec98a74d8.elf

    • Size

      20KB

    • MD5

      00940a6466ffdd660a5cfceec98a74d8

    • SHA1

      9673c3ab07684916584fdbce3b5dc4e1e5645533

    • SHA256

      37abd9ae1ce97738f9e0b116d887603f5533863cac6b881dd048445b1f96d1d1

    • SHA512

      aedff14a60291146b8e3c18751459c501f3851e42728eccb5cd48a775b6e8c769100bb5798c4c739ce6b9027c18078cb9edc335cb948ee2493599d6e25b3422e

    • SSDEEP

      384:M0DLpj8s/qPui8uZxoIA57RWQjJiEVi+ZkXaqOKV14b+502F2vwA9dWuMW21bAK5:x98o08kxofBE+ZkXaqGbp2F2TWul0c5M

    Score
    10/10
    • Mirai

      Mirai is a prevalent Linux malware infecting exposed network devices.

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    • Enumerates running processes

      Discovers information about currently running processes on the system

    • Writes file to system bin folder

MITRE ATT&CK Enterprise v15

Tasks