General

  • Target

    dc8752024f6c4af51ca595ad0b06f0c3bf238eb7b82e3481a88cbcf7c697e924.elf

  • Size

    45KB

  • Sample

    240328-c6lpasba75

  • MD5

    46fae16362ed3bd09ec572575c1e9e3c

  • SHA1

    f63cc4c92073cd2b292b2e29af536e0cbca16b6f

  • SHA256

    dc8752024f6c4af51ca595ad0b06f0c3bf238eb7b82e3481a88cbcf7c697e924

  • SHA512

    f5684dc444029ea2ae4be4714afb673ced50e8ef18e54b15c4e641ba317ee76ea04af4e4d655a129a0318b69472518dc4aac2915f7b95917eacfea62db99c463

  • SSDEEP

    768:5/TYCoIxdEk+AxoTZAZHFeq8b3W9q3UELbUXfi6nVMQHI4vcGpvd:5ECFd+A6YHAx7LRQZd

Score
10/10

Malware Config

Extracted

Family

mirai

Botnet

LZRD

Targets

    • Target

      dc8752024f6c4af51ca595ad0b06f0c3bf238eb7b82e3481a88cbcf7c697e924.elf

    • Size

      45KB

    • MD5

      46fae16362ed3bd09ec572575c1e9e3c

    • SHA1

      f63cc4c92073cd2b292b2e29af536e0cbca16b6f

    • SHA256

      dc8752024f6c4af51ca595ad0b06f0c3bf238eb7b82e3481a88cbcf7c697e924

    • SHA512

      f5684dc444029ea2ae4be4714afb673ced50e8ef18e54b15c4e641ba317ee76ea04af4e4d655a129a0318b69472518dc4aac2915f7b95917eacfea62db99c463

    • SSDEEP

      768:5/TYCoIxdEk+AxoTZAZHFeq8b3W9q3UELbUXfi6nVMQHI4vcGpvd:5ECFd+A6YHAx7LRQZd

    Score
    10/10
    • Mirai

      Mirai is a prevalent Linux malware infecting exposed network devices.

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    • Enumerates running processes

      Discovers information about currently running processes on the system

    • Writes file to system bin folder

MITRE ATT&CK Enterprise v15

Tasks