General

  • Target

    20787b6b13253f72690b13649da5bd60ae706e3297ec396fbe8578e563deeb16.elf

  • Size

    43KB

  • Sample

    241111-cltjea1ama

  • MD5

    9826421512c3c6c94c7bed85ae2675bc

  • SHA1

    9c35c5fc8b7942ecd3417ba3bfa0d018211d5ab4

  • SHA256

    20787b6b13253f72690b13649da5bd60ae706e3297ec396fbe8578e563deeb16

  • SHA512

    8d2d937edf338505ef909d412909871dcd0319551cbb11efa84c397e312dc8445b791821cf814e6455d3b168d95734553d4464f50d7774dfb92183b8797b3523

  • SSDEEP

    768:3wZyKJoofyfTtMLfclRAAO+jVbumZnLM3XgcTaWS5HOFQgL59q3UELM:UbjjOAgfnLGRMO0LM

Malware Config

Extracted

Family

mirai

Botnet

LZRD

Targets

    • Target

      20787b6b13253f72690b13649da5bd60ae706e3297ec396fbe8578e563deeb16.elf

    • Size

      43KB

    • MD5

      9826421512c3c6c94c7bed85ae2675bc

    • SHA1

      9c35c5fc8b7942ecd3417ba3bfa0d018211d5ab4

    • SHA256

      20787b6b13253f72690b13649da5bd60ae706e3297ec396fbe8578e563deeb16

    • SHA512

      8d2d937edf338505ef909d412909871dcd0319551cbb11efa84c397e312dc8445b791821cf814e6455d3b168d95734553d4464f50d7774dfb92183b8797b3523

    • SSDEEP

      768:3wZyKJoofyfTtMLfclRAAO+jVbumZnLM3XgcTaWS5HOFQgL59q3UELM:UbjjOAgfnLGRMO0LM

    • Mirai

      Mirai is a prevalent Linux malware infecting exposed network devices.

    • Mirai family

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    • Enumerates running processes

      Discovers information about currently running processes on the system

    • Writes file to system bin folder

MITRE ATT&CK Enterprise v15

Tasks