General

  • Target

    45dfa91dd7d2e4786d97d8306ecd7ddb681ee47307c5c71adfa363a99579e9a7.elf

  • Size

    37KB

  • Sample

    241116-g69tcazraz

  • MD5

    08cf04b0ad15a8c7c449088e16315353

  • SHA1

    ffacbdbcd817f007e6c57c54b4bbbf69c717670e

  • SHA256

    45dfa91dd7d2e4786d97d8306ecd7ddb681ee47307c5c71adfa363a99579e9a7

  • SHA512

    5484205f6981d97b2712a1d1b9ae18133ddd279aa466a0fb4da48e4613a9e33a45d2f83fe938a890308c1fab93f6ef44c0665c8b2d21990fe2284c88909adcae

  • SSDEEP

    768:ha+BWS+ZPwIIBPGXna4nvdQL5zc6R96SMO/ieUeSMIAdhLc8Cf71nbcuyD7UrQRq:ha+BH+hKBAa4Vcc6RwSMO/ieCMzXI8CB

Malware Config

Extracted

Family

mirai

Botnet

LZRD

Targets

    • Target

      45dfa91dd7d2e4786d97d8306ecd7ddb681ee47307c5c71adfa363a99579e9a7.elf

    • Size

      37KB

    • MD5

      08cf04b0ad15a8c7c449088e16315353

    • SHA1

      ffacbdbcd817f007e6c57c54b4bbbf69c717670e

    • SHA256

      45dfa91dd7d2e4786d97d8306ecd7ddb681ee47307c5c71adfa363a99579e9a7

    • SHA512

      5484205f6981d97b2712a1d1b9ae18133ddd279aa466a0fb4da48e4613a9e33a45d2f83fe938a890308c1fab93f6ef44c0665c8b2d21990fe2284c88909adcae

    • SSDEEP

      768:ha+BWS+ZPwIIBPGXna4nvdQL5zc6R96SMO/ieUeSMIAdhLc8Cf71nbcuyD7UrQRq:ha+BH+hKBAa4Vcc6RwSMO/ieCMzXI8CB

    • Mirai

      Mirai is a prevalent Linux malware infecting exposed network devices.

    • Mirai family

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    • Enumerates running processes

      Discovers information about currently running processes on the system

    • Writes file to system bin folder

MITRE ATT&CK Enterprise v15

Tasks