General

  • Target

    9ff7a99509c5186f028858692deb9b685bb196df414fad5822dec0f4efe90ccd.elf

  • Size

    37KB

  • Sample

    241111-c9ys2azpgs

  • MD5

    adfc93deaed5f946d896d185a7a3672f

  • SHA1

    30686df1ec33ec8941a6bd5471292ec4dfdc7522

  • SHA256

    9ff7a99509c5186f028858692deb9b685bb196df414fad5822dec0f4efe90ccd

  • SHA512

    94318e934aa23e1b9dfe4baa2dd1700986bea4343cf62bcac4c964876b42f70235260bc3ed4d367bf0501bfa334a5472a7307d258762cbf6d9c93b116263867f

  • SSDEEP

    768:KgN29x3ZpzZ5VjNuvtE54Fe7GbxBDbYsPs4P5OXidJgGlzDpbuR1JQ:c9xJZZNKNFjBfRUMZ3VJuu

Malware Config

Extracted

Family

mirai

Botnet

LZRD

Targets

    • Target

      9ff7a99509c5186f028858692deb9b685bb196df414fad5822dec0f4efe90ccd.elf

    • Size

      37KB

    • MD5

      adfc93deaed5f946d896d185a7a3672f

    • SHA1

      30686df1ec33ec8941a6bd5471292ec4dfdc7522

    • SHA256

      9ff7a99509c5186f028858692deb9b685bb196df414fad5822dec0f4efe90ccd

    • SHA512

      94318e934aa23e1b9dfe4baa2dd1700986bea4343cf62bcac4c964876b42f70235260bc3ed4d367bf0501bfa334a5472a7307d258762cbf6d9c93b116263867f

    • SSDEEP

      768:KgN29x3ZpzZ5VjNuvtE54Fe7GbxBDbYsPs4P5OXidJgGlzDpbuR1JQ:c9xJZZNKNFjBfRUMZ3VJuu

    • Mirai

      Mirai is a prevalent Linux malware infecting exposed network devices.

    • Mirai family

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    • Enumerates running processes

      Discovers information about currently running processes on the system

    • Writes file to system bin folder

MITRE ATT&CK Enterprise v15

Tasks