General

  • Target

    3337d4c0c5d6b3fecd252c52f928fbcdf38269e336be80a2ad682bdceb78ade2.elf

  • Size

    38KB

  • Sample

    241114-cq8twssmcy

  • MD5

    869423120dfa1f4bd060d17f4019caa1

  • SHA1

    ae8177a28996ec26d20de6bb24ddf89c6ca4cb42

  • SHA256

    3337d4c0c5d6b3fecd252c52f928fbcdf38269e336be80a2ad682bdceb78ade2

  • SHA512

    f39eba13ba3b4233ebe3369d14a387252e6284e262f68d91946148696d859616c87a028b13c95ba8f399d74958611c42d05fac2980449be1e2b155b1c49f2882

  • SSDEEP

    768:OBKNWbxNdoZd64sVhUQX9bS9CL+v7TqvnGQre6warL5/+qEn9uWJs3UozOw:QQiDdY4hUQNb/yv72vnGFpaH5/qjUzOw

Malware Config

Extracted

Family

mirai

Botnet

LZRD

Targets

    • Target

      3337d4c0c5d6b3fecd252c52f928fbcdf38269e336be80a2ad682bdceb78ade2.elf

    • Size

      38KB

    • MD5

      869423120dfa1f4bd060d17f4019caa1

    • SHA1

      ae8177a28996ec26d20de6bb24ddf89c6ca4cb42

    • SHA256

      3337d4c0c5d6b3fecd252c52f928fbcdf38269e336be80a2ad682bdceb78ade2

    • SHA512

      f39eba13ba3b4233ebe3369d14a387252e6284e262f68d91946148696d859616c87a028b13c95ba8f399d74958611c42d05fac2980449be1e2b155b1c49f2882

    • SSDEEP

      768:OBKNWbxNdoZd64sVhUQX9bS9CL+v7TqvnGQre6warL5/+qEn9uWJs3UozOw:QQiDdY4hUQNb/yv72vnGFpaH5/qjUzOw

    • Mirai

      Mirai is a prevalent Linux malware infecting exposed network devices.

    • Mirai family

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    • Enumerates running processes

      Discovers information about currently running processes on the system

    • Writes file to system bin folder

MITRE ATT&CK Enterprise v15

Tasks