General

  • Target

    e22d9e42159f5322b06a3c14681f2d1d.elf

  • Size

    21KB

  • Sample

    240408-af279aah59

  • MD5

    e22d9e42159f5322b06a3c14681f2d1d

  • SHA1

    47798c01ef520f2e22a0462550225cbf5be0ecfb

  • SHA256

    721fa2fe4eb561fd2ee1a05ebd2bbc1d3ca185bbd86b655095c0265d6dbd6e67

  • SHA512

    23c3483eccb18608d8a1791e978e36bc3aacc125c1d9646e728553a791fdac2edd933aeeef73f532442496c4252fb7d1d2434c343446f16f06901e47736e4a49

  • SSDEEP

    384:TvtIoZxrSniaXs+qx+bwqPXX31+igKb49oQBB7xGjkWRHDwhymdGUop5h0:TvQn4j+Bltb4HZGjdpws3UozG

Score
10/10

Malware Config

Extracted

Family

mirai

Botnet

LZRD

Targets

    • Target

      e22d9e42159f5322b06a3c14681f2d1d.elf

    • Size

      21KB

    • MD5

      e22d9e42159f5322b06a3c14681f2d1d

    • SHA1

      47798c01ef520f2e22a0462550225cbf5be0ecfb

    • SHA256

      721fa2fe4eb561fd2ee1a05ebd2bbc1d3ca185bbd86b655095c0265d6dbd6e67

    • SHA512

      23c3483eccb18608d8a1791e978e36bc3aacc125c1d9646e728553a791fdac2edd933aeeef73f532442496c4252fb7d1d2434c343446f16f06901e47736e4a49

    • SSDEEP

      384:TvtIoZxrSniaXs+qx+bwqPXX31+igKb49oQBB7xGjkWRHDwhymdGUop5h0:TvQn4j+Bltb4HZGjdpws3UozG

    Score
    10/10
    • Mirai

      Mirai is a prevalent Linux malware infecting exposed network devices.

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    • Enumerates running processes

      Discovers information about currently running processes on the system

    • Writes file to system bin folder

MITRE ATT&CK Matrix ATT&CK v13

Persistence

Hijack Execution Flow

1
T1574

Privilege Escalation

Hijack Execution Flow

1
T1574

Defense Evasion

Impair Defenses

1
T1562

Hijack Execution Flow

1
T1574

Tasks