General

  • Target

    a8cb90bf9a5aebdc59d2ef21f29d42e2a634608a29924214b6ad2109c4fcd0f0.zip

  • Size

    23KB

  • Sample

    240805-twe77s1gmq

  • MD5

    74da53509a97322ea573457191898c16

  • SHA1

    bc69f94996c06a2b4ca1dd901e0783cc0f0c892a

  • SHA256

    e121d16fff80fbcd91ec8ce20bde77f77d1c807c7676b5e73529a7d915c77fed

  • SHA512

    0beeef08a3c9f41c639b160be0fb69d6420e8bae2ecc0021c9f1ef3f8e08a483ab1e472aafdaa1d19abe9e9bbc4d7db05c7b72517253b78f5ecf3468cfc97672

  • SSDEEP

    384:DjTIjjE6hNei9RA5g4zsbGEoNT92q9zdgVpJfQDn644okkerf0/fvcif6Y702mTZ:nE46D4nJ2KdCuEgcif6Y4DbE/c

Malware Config

Extracted

Family

mirai

Botnet

LZRD

Targets

    • Target

      a8cb90bf9a5aebdc59d2ef21f29d42e2a634608a29924214b6ad2109c4fcd0f0.elf

    • Size

      24KB

    • MD5

      992784b3405b3a2439bcb091fe539c72

    • SHA1

      c3195e2b36a124088cbf35eb705b01dda8215da4

    • SHA256

      a8cb90bf9a5aebdc59d2ef21f29d42e2a634608a29924214b6ad2109c4fcd0f0

    • SHA512

      074058f9ee2c650cf0e52d4e483cdb51d08d5e5c5bd6694208a6f2ea020f6a364d35c14a10c816c3dca03fdbd8aea8a7cd9affe6b9e4524c0f202a1b14e874cb

    • SSDEEP

      768:chrQlS07dEv0UXqUhvQE+CXQKMQKCXBp2ZqaWvK:KQlS07FUXqIYSXQKquaqK

    Score
    10/10
    • Mirai

      Mirai is a prevalent Linux malware infecting exposed network devices.

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    • Writes file to system bin folder

MITRE ATT&CK Enterprise v15

Tasks