General

  • Target

    fee06c31fd25bdfd971c5a35c31ac4b5.bin

  • Size

    70KB

  • Sample

    241114-cekb6ashla

  • MD5

    16b13c48f3b2b26313ee75e4a044b419

  • SHA1

    43bc1b4a5bc2f845a10403b513a0250fe99732c4

  • SHA256

    d3a04832932b2651fd33fefab8013077ee8c20eace3c3e7b482ab0456af52ed6

  • SHA512

    aa1756e72b77b2297aee1ecb4ce1e28d61bf0df607bce6dc5fcc23bf2c2426c1e3e410b8cfd51c44da30ce22ebbedf2f6e3330844e2a3d5a8be429ad8a46a489

  • SSDEEP

    1536:JxdWFx2LkWDghPoxSrdhra/kQYsbX9DR3JM/kkuKdA5:C8LrMhkUQX9jMYz

Malware Config

Extracted

Family

mirai

Botnet

LZRD

Targets

    • Target

      0c6ade258e6c07b31b300ef0bf9752354ce8252e875c487f0420a758e85ad6e3.elf

    • Size

      163KB

    • MD5

      fee06c31fd25bdfd971c5a35c31ac4b5

    • SHA1

      2abdba915d86cc16754360b9d4536fed1bd1236c

    • SHA256

      0c6ade258e6c07b31b300ef0bf9752354ce8252e875c487f0420a758e85ad6e3

    • SHA512

      58c51a8a8e402427e4c92a68b60fd1b1e76558ca9f0b75d5bde2eef4dbb5d1abae06ef0caa75094de9ef935a49194f8d0ad082cd3026002a7ad8fa92877460b4

    • SSDEEP

      3072:sYReNV2Bsb5s3fa8vM1a+vyJ+Lfnzjsp+T4CUM/9MoDhkilJM:sY0NEC2fa8vM1a+m+/4p+TuM/9XDzJM

    • Contacts a large (23845) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

MITRE ATT&CK Enterprise v15

Tasks