General

  • Target
    0ba4d5e0b8979db40263569d0a00e0ea.bin
  • Size 38KB
  • Sample241114-bc5dwascpe
  • SHA256 6b1f421f74430e6fe2ae022a872e5ecab0c7d8c6554e8f0954c9c27055918e44
  • MD5 SHA1 SHA512 SSDEEP

Malware Config

Extracted

Family
  • mirai

Botnet
  • LZRD

Targets

    • Target
      dedb091ebd4b77f40694fe37f58b72b8347e8ea06f6c4b10d741db28230a2cd9.elf
    • Size 106KB
    • SHA256 dedb091ebd4b77f40694fe37f58b72b8347e8ea06f6c4b10d741db28230a2cd9
    • MD5 SHA1 SHA512 SSDEEP
    • Contacts a large (23504) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

MITRE ATT&CK Enterprise v15

Tasks