General

  • Target

    2f7cd7e67e418f444df3cb977ca175d82150d9042fc99df1fc454e2f6212338f.elf

  • Size

    36KB

  • Sample

    241114-cqek2stbkr

  • MD5

    a36d6912cada96cf8d7d1b4ac81d5ed4

  • SHA1

    021a174c6fab933f38a5d644d971e42f05c445f6

  • SHA256

    2f7cd7e67e418f444df3cb977ca175d82150d9042fc99df1fc454e2f6212338f

  • SHA512

    dab6d68cb17c4b17049f672f23ca57f238af7a7df28d61b8650efbf13839fd14c03032712f7ffa94da5456eda82a2e8006b8f7e01cda1ce17f057fa8542153d4

  • SSDEEP

    768:P+4qtvWUAASjjLMGz7/tjBQd4Mt8nEPH3GguX9NDJeWx0x:29tvWrASjjL17/9BODtoPguzo

Malware Config

Extracted

Family

mirai

Botnet

LZRD

Targets

    • Target

      2f7cd7e67e418f444df3cb977ca175d82150d9042fc99df1fc454e2f6212338f.elf

    • Size

      36KB

    • MD5

      a36d6912cada96cf8d7d1b4ac81d5ed4

    • SHA1

      021a174c6fab933f38a5d644d971e42f05c445f6

    • SHA256

      2f7cd7e67e418f444df3cb977ca175d82150d9042fc99df1fc454e2f6212338f

    • SHA512

      dab6d68cb17c4b17049f672f23ca57f238af7a7df28d61b8650efbf13839fd14c03032712f7ffa94da5456eda82a2e8006b8f7e01cda1ce17f057fa8542153d4

    • SSDEEP

      768:P+4qtvWUAASjjLMGz7/tjBQd4Mt8nEPH3GguX9NDJeWx0x:29tvWrASjjL17/9BODtoPguzo

    • Mirai

      Mirai is a prevalent Linux malware infecting exposed network devices.

    • Mirai family

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    • Enumerates running processes

      Discovers information about currently running processes on the system

    • Writes file to system bin folder

MITRE ATT&CK Enterprise v15

Tasks