General

  • Target

    e30e63f8ef4a083fceeba3c0ba1f3f42c345ea44443c66d241983638ed7a4670.elf

  • Size

    26KB

  • Sample

    241009-cz16eavdll

  • MD5

    8a371a979cbb5959df0299c3603e2ccb

  • SHA1

    700a9491ffff5bee0173af18ec9498705751816c

  • SHA256

    e30e63f8ef4a083fceeba3c0ba1f3f42c345ea44443c66d241983638ed7a4670

  • SHA512

    68300cdf6990c82571a05374dd61f1b6fc1b4018897ff7786d1cd57042f71c4fa09d5970f0e9756fe9b1d7a84d6c57241b85ce44c03772223859225eb8c7e682

  • SSDEEP

    768:QxJnN5wwUcgxbm9h57/GFh9QpZ+pPY4s3Uozhk:ncjzp/vZaSzhk

Malware Config

Extracted

Family

mirai

Botnet

LZRD

Targets

    • Target

      e30e63f8ef4a083fceeba3c0ba1f3f42c345ea44443c66d241983638ed7a4670.elf

    • Size

      26KB

    • MD5

      8a371a979cbb5959df0299c3603e2ccb

    • SHA1

      700a9491ffff5bee0173af18ec9498705751816c

    • SHA256

      e30e63f8ef4a083fceeba3c0ba1f3f42c345ea44443c66d241983638ed7a4670

    • SHA512

      68300cdf6990c82571a05374dd61f1b6fc1b4018897ff7786d1cd57042f71c4fa09d5970f0e9756fe9b1d7a84d6c57241b85ce44c03772223859225eb8c7e682

    • SSDEEP

      768:QxJnN5wwUcgxbm9h57/GFh9QpZ+pPY4s3Uozhk:ncjzp/vZaSzhk

    • Mirai

      Mirai is a prevalent Linux malware infecting exposed network devices.

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    • Enumerates running processes

      Discovers information about currently running processes on the system

    • Writes file to system bin folder

MITRE ATT&CK Enterprise v15

Tasks