General

  • Target

    a206e334022c32d06d937f6eb010cbc782684b6dd7d93e814b204e3b1bedd79d.elf

  • Size

    45KB

  • Sample

    240328-czemeadb7w

  • MD5

    8abc62378c07fa5207386eb330eea3c1

  • SHA1

    2fab05fa3ca773e9b7b9c7c1ef1e7f2c633c7519

  • SHA256

    a206e334022c32d06d937f6eb010cbc782684b6dd7d93e814b204e3b1bedd79d

  • SHA512

    e7f0fe5ae81d53d0286b0a9462463fe0fdffd9e775498667ec7e03c01c1244d0601a06bb4f628bac62c1419e4f96665e5f85e18a79b39c3a3954290594d1d1b7

  • SSDEEP

    768:g/TYCoIxdEk+AxoTZAZHFeq8b3UnLH9q3UELbUXfi6nVMQHI4vcGpvC:gECFd+A6YHAxwLWLRQZC

Score
10/10

Malware Config

Extracted

Family

mirai

Botnet

LZRD

Targets

    • Target

      a206e334022c32d06d937f6eb010cbc782684b6dd7d93e814b204e3b1bedd79d.elf

    • Size

      45KB

    • MD5

      8abc62378c07fa5207386eb330eea3c1

    • SHA1

      2fab05fa3ca773e9b7b9c7c1ef1e7f2c633c7519

    • SHA256

      a206e334022c32d06d937f6eb010cbc782684b6dd7d93e814b204e3b1bedd79d

    • SHA512

      e7f0fe5ae81d53d0286b0a9462463fe0fdffd9e775498667ec7e03c01c1244d0601a06bb4f628bac62c1419e4f96665e5f85e18a79b39c3a3954290594d1d1b7

    • SSDEEP

      768:g/TYCoIxdEk+AxoTZAZHFeq8b3UnLH9q3UELbUXfi6nVMQHI4vcGpvC:gECFd+A6YHAxwLWLRQZC

    Score
    10/10
    • Mirai

      Mirai is a prevalent Linux malware infecting exposed network devices.

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    • Enumerates running processes

      Discovers information about currently running processes on the system

    • Writes file to system bin folder

MITRE ATT&CK Enterprise v15

Tasks