General

  • Target

    c3ae1058890bf151d5d464a608b68e2c377d4d31043e3883efb0d8a20685ab15.elf

  • Size

    36KB

  • Sample

    241110-dgys1a1mdj

  • MD5

    62e0ec59f989335be5fbf630a49da4ea

  • SHA1

    43bdde1afd1089008539973b08e35dd66fb7451a

  • SHA256

    c3ae1058890bf151d5d464a608b68e2c377d4d31043e3883efb0d8a20685ab15

  • SHA512

    ee8c5e36a0abc86c042630fcbd03f96459fe77cd8683498b77121c1a11befe59f72e3363989265317109f77df2d3c8633ccabc7e91581e3bdc363f29b8173b95

  • SSDEEP

    768:WwS0nQr9tpJEu0annIBqVqVHmwIHWUFtGtzXKTr+PUx0nZV:JOX80VqVi2otGtzXpcMZV

Malware Config

Extracted

Family

mirai

Botnet

LZRD

Targets

    • Target

      c3ae1058890bf151d5d464a608b68e2c377d4d31043e3883efb0d8a20685ab15.elf

    • Size

      36KB

    • MD5

      62e0ec59f989335be5fbf630a49da4ea

    • SHA1

      43bdde1afd1089008539973b08e35dd66fb7451a

    • SHA256

      c3ae1058890bf151d5d464a608b68e2c377d4d31043e3883efb0d8a20685ab15

    • SHA512

      ee8c5e36a0abc86c042630fcbd03f96459fe77cd8683498b77121c1a11befe59f72e3363989265317109f77df2d3c8633ccabc7e91581e3bdc363f29b8173b95

    • SSDEEP

      768:WwS0nQr9tpJEu0annIBqVqVHmwIHWUFtGtzXKTr+PUx0nZV:JOX80VqVi2otGtzXpcMZV

    • Mirai

      Mirai is a prevalent Linux malware infecting exposed network devices.

    • Mirai family

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    • Enumerates running processes

      Discovers information about currently running processes on the system

    • Writes file to system bin folder

MITRE ATT&CK Enterprise v15

Tasks