General

  • Target

    100aedc6f1bd3cc9b9cc341b0eb2803b7970f3af466587da4730385162be7598.elf

  • Size

    38KB

  • Sample

    241111-cjhn5atken

  • MD5

    ffce0b8a9fcf66adcc1d55dd20fce3c9

  • SHA1

    eedae7a7b1190f3d12b88d5b0357bf19196f9dbc

  • SHA256

    100aedc6f1bd3cc9b9cc341b0eb2803b7970f3af466587da4730385162be7598

  • SHA512

    d739a1ecfdef549b03f42d14272b5256704c8c56d305fff01f13d156c2babca9c3f2241a3aa07c536855a70c9c63cd357b15b8a6b79a5218b1d6a1d4e7f0bfd8

  • SSDEEP

    768:XBKNWbxNdoZd64sVhUQX9bS9CL+v7TqvnGQre6warL5/+qEn9d1s3UozOF:xQiDdY4hUQNb/yv72vnGFpaH5/qj4zOF

Malware Config

Extracted

Family

mirai

Botnet

LZRD

Targets

    • Target

      100aedc6f1bd3cc9b9cc341b0eb2803b7970f3af466587da4730385162be7598.elf

    • Size

      38KB

    • MD5

      ffce0b8a9fcf66adcc1d55dd20fce3c9

    • SHA1

      eedae7a7b1190f3d12b88d5b0357bf19196f9dbc

    • SHA256

      100aedc6f1bd3cc9b9cc341b0eb2803b7970f3af466587da4730385162be7598

    • SHA512

      d739a1ecfdef549b03f42d14272b5256704c8c56d305fff01f13d156c2babca9c3f2241a3aa07c536855a70c9c63cd357b15b8a6b79a5218b1d6a1d4e7f0bfd8

    • SSDEEP

      768:XBKNWbxNdoZd64sVhUQX9bS9CL+v7TqvnGQre6warL5/+qEn9d1s3UozOF:xQiDdY4hUQNb/yv72vnGFpaH5/qj4zOF

    • Mirai

      Mirai is a prevalent Linux malware infecting exposed network devices.

    • Mirai family

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    • Enumerates running processes

      Discovers information about currently running processes on the system

    • Writes file to system bin folder

MITRE ATT&CK Enterprise v15

Tasks