General

  • Target

    e1766773026ed9e92778b034e9428c1861d01021f40a351ac5a44aff59c930ce.elf

  • Size

    23KB

  • Sample

    241110-dltpvaybkp

  • MD5

    685f0ea9406f8ddbae718a72c3f76b90

  • SHA1

    eb7b35a6e797e826b6b20b39bdeb37402e062b40

  • SHA256

    e1766773026ed9e92778b034e9428c1861d01021f40a351ac5a44aff59c930ce

  • SHA512

    ef8ad22c1ad422413734fced67937db848b6b14e0b7312614af315aeac51946c7a51fc07c7118a19403067893fbe2568b2615d9b1c293175713bbbc68ee627c5

  • SSDEEP

    384:neD8ZSH2LLZUYyGZbsOiTrowSN9rnZMINlphQ/HYtui2zbmdzJgGlzDpH7uNj1J+:neD8ZSWvZHZbs1row697qohQvg9wizJH

Malware Config

Extracted

Family

mirai

Botnet

LZRD

Targets

    • Target

      e1766773026ed9e92778b034e9428c1861d01021f40a351ac5a44aff59c930ce.elf

    • Size

      23KB

    • MD5

      685f0ea9406f8ddbae718a72c3f76b90

    • SHA1

      eb7b35a6e797e826b6b20b39bdeb37402e062b40

    • SHA256

      e1766773026ed9e92778b034e9428c1861d01021f40a351ac5a44aff59c930ce

    • SHA512

      ef8ad22c1ad422413734fced67937db848b6b14e0b7312614af315aeac51946c7a51fc07c7118a19403067893fbe2568b2615d9b1c293175713bbbc68ee627c5

    • SSDEEP

      384:neD8ZSH2LLZUYyGZbsOiTrowSN9rnZMINlphQ/HYtui2zbmdzJgGlzDpH7uNj1J+:neD8ZSWvZHZbs1row697qohQvg9wizJH

    • Mirai

      Mirai is a prevalent Linux malware infecting exposed network devices.

    • Mirai family

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    • Writes file to system bin folder

MITRE ATT&CK Enterprise v15

Tasks