General

  • Target

    b0c8590e535b62e60453bcfca39107c7591ef0e6588c7b68d88bf3ff3a4233df.elf

  • Size

    45KB

  • Sample

    241013-b3lz8asfna

  • MD5

    cff1439f2ed8051a39f90e55fcabfbca

  • SHA1

    356fb6588d447cc423cfb41d7c45eafe8395e4f0

  • SHA256

    b0c8590e535b62e60453bcfca39107c7591ef0e6588c7b68d88bf3ff3a4233df

  • SHA512

    d993e7dd142423cb9ada1e1eedd3112e1ee9d11ce9adffde67c53a88cf986ced2f622a06eaf9e40b208da9c9ff27075432acd078c990a1cfa054885e4808f635

  • SSDEEP

    768:r/TYCoIxdELi1QIx83iWl33NUsJ5uNAs0U9q3UELbUXfi6nVMQHI4vcGpvb:rECFjqIjifJ5uSs09LRQZb

Malware Config

Extracted

Family

mirai

Botnet

LZRD

Targets

    • Target

      b0c8590e535b62e60453bcfca39107c7591ef0e6588c7b68d88bf3ff3a4233df.elf

    • Size

      45KB

    • MD5

      cff1439f2ed8051a39f90e55fcabfbca

    • SHA1

      356fb6588d447cc423cfb41d7c45eafe8395e4f0

    • SHA256

      b0c8590e535b62e60453bcfca39107c7591ef0e6588c7b68d88bf3ff3a4233df

    • SHA512

      d993e7dd142423cb9ada1e1eedd3112e1ee9d11ce9adffde67c53a88cf986ced2f622a06eaf9e40b208da9c9ff27075432acd078c990a1cfa054885e4808f635

    • SSDEEP

      768:r/TYCoIxdELi1QIx83iWl33NUsJ5uNAs0U9q3UELbUXfi6nVMQHI4vcGpvb:rECFjqIjifJ5uSs09LRQZb

    • Mirai

      Mirai is a prevalent Linux malware infecting exposed network devices.

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    • Writes file to system bin folder

MITRE ATT&CK Enterprise v15

Tasks