General

  • Target

    1bfbf7137af8f36627159116bc0dbfe916315853c6eb61b7d6011224699487f3.elf

  • Size

    37KB

  • Sample

    241111-clbnla1alc

  • MD5

    0d6e1b9b64e7264be82e54ce16625d3d

  • SHA1

    e7bdee0a6c0edf518ce58dec54ee07c19b0f4f3b

  • SHA256

    1bfbf7137af8f36627159116bc0dbfe916315853c6eb61b7d6011224699487f3

  • SHA512

    ab43d184b61391ab72085da965fe0498cc99e69f4f87eab448f3c72c3f7e755e9a062af17db0cc5c2117d421a5bf53505b1676ebf554021e356ca8e2cfd41c4b

  • SSDEEP

    768:lxaYe0syQ8Au2EDj/GWdBKJ7LtFCDo3fXqlgmbI6GqmFY1rhanbcuyD7UrQRjx:aYgB3uFGW+JB3fXqlgmk6GqQYunouy8C

Malware Config

Extracted

Family

mirai

Botnet

LZRD

Targets

    • Target

      1bfbf7137af8f36627159116bc0dbfe916315853c6eb61b7d6011224699487f3.elf

    • Size

      37KB

    • MD5

      0d6e1b9b64e7264be82e54ce16625d3d

    • SHA1

      e7bdee0a6c0edf518ce58dec54ee07c19b0f4f3b

    • SHA256

      1bfbf7137af8f36627159116bc0dbfe916315853c6eb61b7d6011224699487f3

    • SHA512

      ab43d184b61391ab72085da965fe0498cc99e69f4f87eab448f3c72c3f7e755e9a062af17db0cc5c2117d421a5bf53505b1676ebf554021e356ca8e2cfd41c4b

    • SSDEEP

      768:lxaYe0syQ8Au2EDj/GWdBKJ7LtFCDo3fXqlgmbI6GqmFY1rhanbcuyD7UrQRjx:aYgB3uFGW+JB3fXqlgmk6GqQYunouy8C

    • Mirai

      Mirai is a prevalent Linux malware infecting exposed network devices.

    • Mirai family

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    • Enumerates running processes

      Discovers information about currently running processes on the system

    • Writes file to system bin folder

MITRE ATT&CK Enterprise v15

Tasks