General

  • Target

    86fb9cd7b19cb7a88cd7eae579d2656331110b296e40a535010affc6ce3b86cf.elf

  • Size

    24KB

  • Sample

    240521-rjthysgg8y

  • MD5

    bd52e0ed8e0b0880f6f8650fdf31a45b

  • SHA1

    764b6909d562f09a997e26b658d68625e07cc9f7

  • SHA256

    86fb9cd7b19cb7a88cd7eae579d2656331110b296e40a535010affc6ce3b86cf

  • SHA512

    9be052a1fe960efb52163e8a2d3138aa8fca66b18372a7a79689398ff1e451a503a046ff22c8cf46873b38236490279d83b1f7102376f702a924bc80636875f8

  • SSDEEP

    768:5Qu5Va7FXydihUArB/2uc4gViw/EGFSwxxREVUe:iu+7FX0kU2B/Bg3zjxxREVJ

Malware Config

Extracted

Family

mirai

Botnet

LZRD

Targets

    • Target

      86fb9cd7b19cb7a88cd7eae579d2656331110b296e40a535010affc6ce3b86cf.elf

    • Size

      24KB

    • MD5

      bd52e0ed8e0b0880f6f8650fdf31a45b

    • SHA1

      764b6909d562f09a997e26b658d68625e07cc9f7

    • SHA256

      86fb9cd7b19cb7a88cd7eae579d2656331110b296e40a535010affc6ce3b86cf

    • SHA512

      9be052a1fe960efb52163e8a2d3138aa8fca66b18372a7a79689398ff1e451a503a046ff22c8cf46873b38236490279d83b1f7102376f702a924bc80636875f8

    • SSDEEP

      768:5Qu5Va7FXydihUArB/2uc4gViw/EGFSwxxREVUe:iu+7FX0kU2B/Bg3zjxxREVJ

    Score
    10/10
    • Mirai

      Mirai is a prevalent Linux malware infecting exposed network devices.

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    • Enumerates running processes

      Discovers information about currently running processes on the system

    • Writes file to system bin folder

MITRE ATT&CK Enterprise v15

Tasks