General

  • Target

    72e5f68a809d396480993cde5c6802a046394f2e7a92320533e34de2142fa92f.elf

  • Size

    37KB

  • Sample

    241114-c4llhstcpn

  • MD5

    82509bfc921627d6e784bae29a9ba61f

  • SHA1

    aeadcb2cdf407a6018c8cbdb82b7d9b385f12be6

  • SHA256

    72e5f68a809d396480993cde5c6802a046394f2e7a92320533e34de2142fa92f

  • SHA512

    ea43e1a867b233cb4e9b338f410b494461712b66ffb11ab1c170cf7d3f7724d6e9cd71d73934b33d2e66364f40b4e5375cf06c0bf3dc40f246da72a7388aee37

  • SSDEEP

    768:ea+BWS+ZPwIIBPGXna4nvdQL5zc6R96SMO/ieUeSMIQ3begGnbcuyD7UrQRj9:ea+BH+hKBAa4Vcc6RwSMO/ieCM33begx

Malware Config

Extracted

Family

mirai

Botnet

LZRD

Targets

    • Target

      72e5f68a809d396480993cde5c6802a046394f2e7a92320533e34de2142fa92f.elf

    • Size

      37KB

    • MD5

      82509bfc921627d6e784bae29a9ba61f

    • SHA1

      aeadcb2cdf407a6018c8cbdb82b7d9b385f12be6

    • SHA256

      72e5f68a809d396480993cde5c6802a046394f2e7a92320533e34de2142fa92f

    • SHA512

      ea43e1a867b233cb4e9b338f410b494461712b66ffb11ab1c170cf7d3f7724d6e9cd71d73934b33d2e66364f40b4e5375cf06c0bf3dc40f246da72a7388aee37

    • SSDEEP

      768:ea+BWS+ZPwIIBPGXna4nvdQL5zc6R96SMO/ieUeSMIQ3begGnbcuyD7UrQRj9:ea+BH+hKBAa4Vcc6RwSMO/ieCM33begx

    • Mirai

      Mirai is a prevalent Linux malware infecting exposed network devices.

    • Mirai family

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    • Enumerates running processes

      Discovers information about currently running processes on the system

    • Writes file to system bin folder

MITRE ATT&CK Enterprise v15

Tasks