General

  • Target

    6e113e31227c82766b986496191c9645ada6f2e3b91a794eb2e6f274020a4c4c.elf

  • Size

    45KB

  • Sample

    240411-br6kgsgd96

  • MD5

    52d32b03a064ad1484a148039b8efd6f

  • SHA1

    3ba0c7fc52624f9471c0d34857ed971a80895b80

  • SHA256

    6e113e31227c82766b986496191c9645ada6f2e3b91a794eb2e6f274020a4c4c

  • SHA512

    b039f6d10587ddec0644cb87c90e0424dc661c6dae983e35a2ad2ba0fbd779cb83b9351b1907c52e57731bcc21409b291fdb8aa4019bf1eb6b948dc8b80b9152

  • SSDEEP

    768:D/TYCoIxdEk+AxoTZAZHFeq8b3K9q3UELmjfTgdGwdh5WGES3ye:DECFd+A6YHAx/L+fMJJ5

Score
10/10

Malware Config

Extracted

Family

mirai

Botnet

LZRD

Targets

    • Target

      6e113e31227c82766b986496191c9645ada6f2e3b91a794eb2e6f274020a4c4c.elf

    • Size

      45KB

    • MD5

      52d32b03a064ad1484a148039b8efd6f

    • SHA1

      3ba0c7fc52624f9471c0d34857ed971a80895b80

    • SHA256

      6e113e31227c82766b986496191c9645ada6f2e3b91a794eb2e6f274020a4c4c

    • SHA512

      b039f6d10587ddec0644cb87c90e0424dc661c6dae983e35a2ad2ba0fbd779cb83b9351b1907c52e57731bcc21409b291fdb8aa4019bf1eb6b948dc8b80b9152

    • SSDEEP

      768:D/TYCoIxdEk+AxoTZAZHFeq8b3K9q3UELmjfTgdGwdh5WGES3ye:DECFd+A6YHAx/L+fMJJ5

    Score
    10/10
    • Mirai

      Mirai is a prevalent Linux malware infecting exposed network devices.

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    • Enumerates running processes

      Discovers information about currently running processes on the system

    • Writes file to system bin folder

MITRE ATT&CK Matrix ATT&CK v13

Persistence

Hijack Execution Flow

1
T1574

Privilege Escalation

Hijack Execution Flow

1
T1574

Defense Evasion

Impair Defenses

1
T1562

Hijack Execution Flow

1
T1574

Tasks