General

  • Target

    0299db4a0ce21dcc0e22f52e8c59708b91f77c63d6bfe03c88e1eca328d2e4e5.elf

  • Size

    60KB

  • Sample

    241116-cf3vwsxgke

  • MD5

    5bab80408920f56ad67ab4d605cb522a

  • SHA1

    14e4c55cea2e569fff6050191d43b268304e5839

  • SHA256

    0299db4a0ce21dcc0e22f52e8c59708b91f77c63d6bfe03c88e1eca328d2e4e5

  • SHA512

    d9f1d1363d09ec001592db0df5c8474c94a8acef3f278cd3a8117e6edd6c5a2b70bc7b249e5fe56bdde7cb78cc6dde73efb78d4f53a509244175dfdb20c3edc7

  • SSDEEP

    1536:zVQSmwtMJXmejthsPLTM5Tfv83KJ2crl2EWE:zVywt8XZMPLgTX83KHl2EWE

Malware Config

Extracted

Family

mirai

Botnet

LZRD

Targets

    • Target

      0299db4a0ce21dcc0e22f52e8c59708b91f77c63d6bfe03c88e1eca328d2e4e5.elf

    • Size

      60KB

    • MD5

      5bab80408920f56ad67ab4d605cb522a

    • SHA1

      14e4c55cea2e569fff6050191d43b268304e5839

    • SHA256

      0299db4a0ce21dcc0e22f52e8c59708b91f77c63d6bfe03c88e1eca328d2e4e5

    • SHA512

      d9f1d1363d09ec001592db0df5c8474c94a8acef3f278cd3a8117e6edd6c5a2b70bc7b249e5fe56bdde7cb78cc6dde73efb78d4f53a509244175dfdb20c3edc7

    • SSDEEP

      1536:zVQSmwtMJXmejthsPLTM5Tfv83KJ2crl2EWE:zVywt8XZMPLgTX83KHl2EWE

    • Mirai

      Mirai is a prevalent Linux malware infecting exposed network devices.

    • Mirai family

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    • Enumerates running processes

      Discovers information about currently running processes on the system

    • Writes file to system bin folder

MITRE ATT&CK Enterprise v15

Tasks