General

  • Target

    9d780354175a3b406f5764962a3ba7c137961d10005c632db0e7baae9e0b9008.elf

  • Size

    20KB

  • Sample

    241101-fc7apaxcrq

  • MD5

    9989c8ea288da2dddad73db20f372194

  • SHA1

    06efc879f9c23d099b6716bf9f84ac8666f29e98

  • SHA256

    9d780354175a3b406f5764962a3ba7c137961d10005c632db0e7baae9e0b9008

  • SHA512

    32ea5c58eb7fac324c88f576c7e05867599e5d3380f8868302a315ecc84427e2f80693386150e3121842a06f15c476224c4f66a1dda4d71d47511a1d7c600de9

  • SSDEEP

    384:M4LwKYgk32RO+KDumR4JcookJZSGSnLD3E4ylGYfTZiPTkhxJgukhglSyk:bc26etZvGD04xY7mkuuQgzk

Malware Config

Extracted

Family

mirai

Botnet

LZRD

Targets

    • Target

      9d780354175a3b406f5764962a3ba7c137961d10005c632db0e7baae9e0b9008.elf

    • Size

      20KB

    • MD5

      9989c8ea288da2dddad73db20f372194

    • SHA1

      06efc879f9c23d099b6716bf9f84ac8666f29e98

    • SHA256

      9d780354175a3b406f5764962a3ba7c137961d10005c632db0e7baae9e0b9008

    • SHA512

      32ea5c58eb7fac324c88f576c7e05867599e5d3380f8868302a315ecc84427e2f80693386150e3121842a06f15c476224c4f66a1dda4d71d47511a1d7c600de9

    • SSDEEP

      384:M4LwKYgk32RO+KDumR4JcookJZSGSnLD3E4ylGYfTZiPTkhxJgukhglSyk:bc26etZvGD04xY7mkuuQgzk

    • Mirai

      Mirai is a prevalent Linux malware infecting exposed network devices.

    • Mirai family

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    • Enumerates running processes

      Discovers information about currently running processes on the system

    • Writes file to system bin folder

MITRE ATT&CK Enterprise v15

Tasks