General

  • Target

    27470473f6b873dfcdc2d9394775287286916759db07a55e0ea70b151e9943cc.elf

  • Size

    23KB

  • Sample

    241101-c1b8nswelj

  • MD5

    6435daeac1475e26a58bb4a1a1d559f2

  • SHA1

    84038f6881249b0a485f29424e9cc5c4d623a82d

  • SHA256

    27470473f6b873dfcdc2d9394775287286916759db07a55e0ea70b151e9943cc

  • SHA512

    d14dc6bba03e413fd9f05ced7de92740f9c4c09d0ea2d2c792a7ee03b21aa39417a73143f562ecbbba99275094f9f72cfd2ad4391527d77e739c2bcd900c9e5f

  • SSDEEP

    384:kSXxETd4lEXBuQTM9FVa2gbZWRcQ9bcJRXpv7KcTWm5Y9JgGlzDpH7uNj1J/J:kwETdXut/gIR9MFZ7KcTWSKJgGlzDpbo

Malware Config

Extracted

Family

mirai

Botnet

LZRD

Targets

    • Target

      27470473f6b873dfcdc2d9394775287286916759db07a55e0ea70b151e9943cc.elf

    • Size

      23KB

    • MD5

      6435daeac1475e26a58bb4a1a1d559f2

    • SHA1

      84038f6881249b0a485f29424e9cc5c4d623a82d

    • SHA256

      27470473f6b873dfcdc2d9394775287286916759db07a55e0ea70b151e9943cc

    • SHA512

      d14dc6bba03e413fd9f05ced7de92740f9c4c09d0ea2d2c792a7ee03b21aa39417a73143f562ecbbba99275094f9f72cfd2ad4391527d77e739c2bcd900c9e5f

    • SSDEEP

      384:kSXxETd4lEXBuQTM9FVa2gbZWRcQ9bcJRXpv7KcTWm5Y9JgGlzDpH7uNj1J/J:kwETdXut/gIR9MFZ7KcTWSKJgGlzDpbo

    • Mirai

      Mirai is a prevalent Linux malware infecting exposed network devices.

    • Mirai family

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    • Enumerates running processes

      Discovers information about currently running processes on the system

    • Writes file to system bin folder

MITRE ATT&CK Enterprise v15

Tasks