General

  • Target

    aa1d49b1efb5790631b22235aab16ba9faaadbd5d4dddacf3fa9a647d153bc9a.elf

  • Size

    45KB

  • Sample

    241110-dcj42s1lbk

  • MD5

    3e325fc36baf43c0761d82f71e2dbacf

  • SHA1

    51abc264a88fc085838286819f1d55c3a5e2c974

  • SHA256

    aa1d49b1efb5790631b22235aab16ba9faaadbd5d4dddacf3fa9a647d153bc9a

  • SHA512

    c3eb09ed0589364dea6a2359cab8239dea8afde64f63295e03689a67ffcbb9ba071a8b1b91c55b993aba5bdc42549a5bc75df5e9f6ce2a7bc9896c6a86814134

  • SSDEEP

    768:g/TYCoIxdEk+AxoTZAZHFeq8b3wT9q3UELbUXfi6nVMQHI4vcGpvk3:gECFd+A6YHAxTLRQZk3

Malware Config

Extracted

Family

mirai

Botnet

LZRD

Targets

    • Target

      aa1d49b1efb5790631b22235aab16ba9faaadbd5d4dddacf3fa9a647d153bc9a.elf

    • Size

      45KB

    • MD5

      3e325fc36baf43c0761d82f71e2dbacf

    • SHA1

      51abc264a88fc085838286819f1d55c3a5e2c974

    • SHA256

      aa1d49b1efb5790631b22235aab16ba9faaadbd5d4dddacf3fa9a647d153bc9a

    • SHA512

      c3eb09ed0589364dea6a2359cab8239dea8afde64f63295e03689a67ffcbb9ba071a8b1b91c55b993aba5bdc42549a5bc75df5e9f6ce2a7bc9896c6a86814134

    • SSDEEP

      768:g/TYCoIxdEk+AxoTZAZHFeq8b3wT9q3UELbUXfi6nVMQHI4vcGpvk3:gECFd+A6YHAxTLRQZk3

    • Mirai

      Mirai is a prevalent Linux malware infecting exposed network devices.

    • Mirai family

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    • Writes file to system bin folder

MITRE ATT&CK Enterprise v15

Tasks