General

  • Target

    da43477c443f642ccf9c57720a6c5c75.elf

  • Size

    20KB

  • Sample

    240722-14259s1hjm

  • MD5

    da43477c443f642ccf9c57720a6c5c75

  • SHA1

    8eada786384fc5875890a7212fa4f0cf926e17cb

  • SHA256

    52d7452ee7396c5b9db31a7ac0bce15958a550ce6a0fb5291da3c9222c737e09

  • SHA512

    5869708cce0c31148513ba86bde8ec182e0e92a78a7ecd45998d80829cb67a74c93979af380e80a7a047351a2b700aa0bd9d28dacbd2b4b295d138827f8f35a7

  • SSDEEP

    384:Mg4Lpj8s/qPui8uZxoIA57RWQjJiEVi+ZkZadmNUCfSWVU7D/TN4zbF0ApssyjSO:M98o08kxofBE+ZkZaINKYwB4HWoyZx

Malware Config

Extracted

Family

mirai

Botnet

LZRD

Targets

    • Target

      da43477c443f642ccf9c57720a6c5c75.elf

    • Size

      20KB

    • MD5

      da43477c443f642ccf9c57720a6c5c75

    • SHA1

      8eada786384fc5875890a7212fa4f0cf926e17cb

    • SHA256

      52d7452ee7396c5b9db31a7ac0bce15958a550ce6a0fb5291da3c9222c737e09

    • SHA512

      5869708cce0c31148513ba86bde8ec182e0e92a78a7ecd45998d80829cb67a74c93979af380e80a7a047351a2b700aa0bd9d28dacbd2b4b295d138827f8f35a7

    • SSDEEP

      384:Mg4Lpj8s/qPui8uZxoIA57RWQjJiEVi+ZkZadmNUCfSWVU7D/TN4zbF0ApssyjSO:M98o08kxofBE+ZkZaINKYwB4HWoyZx

    Score
    10/10
    • Mirai

      Mirai is a prevalent Linux malware infecting exposed network devices.

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    • Enumerates running processes

      Discovers information about currently running processes on the system

    • Writes file to system bin folder

MITRE ATT&CK Enterprise v15

Tasks