General

  • Target

    e2a04bd1fb1e7ed211e3ee19b08337b6361d695278417d5a21ba602ca7eb99b4.elf

  • Size

    20KB

  • Sample

    241110-dlyc2axpdx

  • MD5

    895badd48eed0c0e0ba14e8d5967e7bb

  • SHA1

    3c4c22665e6197841f7e68f941a4a27dca3d4d8d

  • SHA256

    e2a04bd1fb1e7ed211e3ee19b08337b6361d695278417d5a21ba602ca7eb99b4

  • SHA512

    dfc79a34d1694b7e4422fa4861bf475b3efe2398df684126e71293880f51f4bf39f396fb5c5e36a2c12944c7406e86cac09c3d3b8c432194aab976c8b7e94af7

  • SSDEEP

    384:M0DLpj8s/qPui8uZxoIA57RWQjJiEVi+ZkXadmTb+502F2vwA9dWuMW21bAK1oTR:x98o08kxofBE+ZkXaITbp2F2TWul0c51

Malware Config

Extracted

Family

mirai

Botnet

LZRD

Targets

    • Target

      e2a04bd1fb1e7ed211e3ee19b08337b6361d695278417d5a21ba602ca7eb99b4.elf

    • Size

      20KB

    • MD5

      895badd48eed0c0e0ba14e8d5967e7bb

    • SHA1

      3c4c22665e6197841f7e68f941a4a27dca3d4d8d

    • SHA256

      e2a04bd1fb1e7ed211e3ee19b08337b6361d695278417d5a21ba602ca7eb99b4

    • SHA512

      dfc79a34d1694b7e4422fa4861bf475b3efe2398df684126e71293880f51f4bf39f396fb5c5e36a2c12944c7406e86cac09c3d3b8c432194aab976c8b7e94af7

    • SSDEEP

      384:M0DLpj8s/qPui8uZxoIA57RWQjJiEVi+ZkXadmTb+502F2vwA9dWuMW21bAK1oTR:x98o08kxofBE+ZkXaITbp2F2TWul0c51

    • Mirai

      Mirai is a prevalent Linux malware infecting exposed network devices.

    • Mirai family

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    • Enumerates running processes

      Discovers information about currently running processes on the system

    • Writes file to system bin folder

MITRE ATT&CK Enterprise v15

Tasks