General

  • Target

    na.elf

  • Size

    23KB

  • Sample

    241012-g55g8ssdpj

  • MD5

    506ddfc3e5aca187e25a5999e5a1831d

  • SHA1

    b1d3848f7ba1aa7623dfbc847d8dacbca5638efd

  • SHA256

    a9645840ed9e516a7929525539cb3f750e2176ee5a63a6ab5edc67b9857e85cc

  • SHA512

    cace551488dfaf502f64dad0e72ce8114c89b09be173b1f8b5b25f2f707676f2b2a4563364de8a14e43c90745718faa4c56085be05b4afde2468b1b6d1bda9f8

  • SSDEEP

    384:YeD8ZSH2LLZUYyGZbsOiTFdrd44YiTGeuCqlQCXHpKJjA19eoFmdtJgGlzDpH7uW:YeD8ZSWvZHZbs1Fx+1iTGeZqlQCXoJss

Malware Config

Extracted

Family

mirai

Botnet

LZRD

Targets

    • Target

      na.elf

    • Size

      23KB

    • MD5

      506ddfc3e5aca187e25a5999e5a1831d

    • SHA1

      b1d3848f7ba1aa7623dfbc847d8dacbca5638efd

    • SHA256

      a9645840ed9e516a7929525539cb3f750e2176ee5a63a6ab5edc67b9857e85cc

    • SHA512

      cace551488dfaf502f64dad0e72ce8114c89b09be173b1f8b5b25f2f707676f2b2a4563364de8a14e43c90745718faa4c56085be05b4afde2468b1b6d1bda9f8

    • SSDEEP

      384:YeD8ZSH2LLZUYyGZbsOiTFdrd44YiTGeuCqlQCXHpKJjA19eoFmdtJgGlzDpH7uW:YeD8ZSWvZHZbs1Fx+1iTGeZqlQCXoJss

    • Mirai

      Mirai is a prevalent Linux malware infecting exposed network devices.

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    • Enumerates running processes

      Discovers information about currently running processes on the system

    • Writes file to system bin folder

MITRE ATT&CK Enterprise v15

Tasks