General

  • Target

    4ade550c0fc846f00f4e371c80dad67c26d08151503c630f40fd54e5b1adbd2c.elf

  • Size

    22KB

  • Sample

    241101-d323jsvjgw

  • MD5

    cb074cc18f8fb31437d9b634cdf127dd

  • SHA1

    1504e1c0af2727b03454783decc6da50393a78e0

  • SHA256

    4ade550c0fc846f00f4e371c80dad67c26d08151503c630f40fd54e5b1adbd2c

  • SHA512

    0c897ed875c4b993a172479078c8a5ce25d2e06b6ed0539b375d0af1295658a0ee8c8e230e18eeae8bc843339f2abe306b80242389bf4e73f2a4105abc08c9ad

  • SSDEEP

    384:ByF1Pel7ZYiR5YBuukX3R99f/lb39zUULNKzME2XfC5WU75UgG06tVN2lM5B7hu:BS1PIZvRZZhjN7dRaU65WQUgGtVNSM8

Malware Config

Extracted

Family

mirai

Botnet

LZRD

Targets

    • Target

      4ade550c0fc846f00f4e371c80dad67c26d08151503c630f40fd54e5b1adbd2c.elf

    • Size

      22KB

    • MD5

      cb074cc18f8fb31437d9b634cdf127dd

    • SHA1

      1504e1c0af2727b03454783decc6da50393a78e0

    • SHA256

      4ade550c0fc846f00f4e371c80dad67c26d08151503c630f40fd54e5b1adbd2c

    • SHA512

      0c897ed875c4b993a172479078c8a5ce25d2e06b6ed0539b375d0af1295658a0ee8c8e230e18eeae8bc843339f2abe306b80242389bf4e73f2a4105abc08c9ad

    • SSDEEP

      384:ByF1Pel7ZYiR5YBuukX3R99f/lb39zUULNKzME2XfC5WU75UgG06tVN2lM5B7hu:BS1PIZvRZZhjN7dRaU65WQUgGtVNSM8

    • Mirai

      Mirai is a prevalent Linux malware infecting exposed network devices.

    • Mirai family

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    • Enumerates running processes

      Discovers information about currently running processes on the system

    • Writes file to system bin folder

MITRE ATT&CK Enterprise v15

Tasks