General

  • Target

    ac22fda1f003519b5c039fa381ba6ee5894baa35565c64990ab955dd61c8b99d.elf

  • Size

    30KB

  • Sample

    240810-bz2aqsteld

  • MD5

    c37a184d60c58f3724be2ccf4b6d48ba

  • SHA1

    35a63f29ea98a63d9a1ba3d073a8de67cdd3c6f8

  • SHA256

    ac22fda1f003519b5c039fa381ba6ee5894baa35565c64990ab955dd61c8b99d

  • SHA512

    90dd6409ba6ee25813d7b71964b02145a1bdf431c535ceb3415006d6da7f71a03c28d1cf332ea30c48652b0564a9884929d95426ef737c5f72ac7a0bb046da49

  • SSDEEP

    768:HEcInx6ray/LOkCsrzgCWbMFkfTiizJgGlzDpbuR1J9:HxInxWQsr0tMFK+gVJuL

Malware Config

Extracted

Family

mirai

Botnet

LZRD

Targets

    • Target

      ac22fda1f003519b5c039fa381ba6ee5894baa35565c64990ab955dd61c8b99d.elf

    • Size

      30KB

    • MD5

      c37a184d60c58f3724be2ccf4b6d48ba

    • SHA1

      35a63f29ea98a63d9a1ba3d073a8de67cdd3c6f8

    • SHA256

      ac22fda1f003519b5c039fa381ba6ee5894baa35565c64990ab955dd61c8b99d

    • SHA512

      90dd6409ba6ee25813d7b71964b02145a1bdf431c535ceb3415006d6da7f71a03c28d1cf332ea30c48652b0564a9884929d95426ef737c5f72ac7a0bb046da49

    • SSDEEP

      768:HEcInx6ray/LOkCsrzgCWbMFkfTiizJgGlzDpbuR1J9:HxInxWQsr0tMFK+gVJuL

    • Mirai

      Mirai is a prevalent Linux malware infecting exposed network devices.

    • Contacts a large (16563) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

MITRE ATT&CK Enterprise v15

Tasks