General

  • Target

    3263a18b551e568dd7d8de093e759ef58c98d619ab124b94de9043ac66a31155.elf

  • Size

    38KB

  • Sample

    241116-ga4x8avkdm

  • MD5

    1ce2e418d0e3f0998df57506b584bc24

  • SHA1

    bdd4ea908c8f874c9dc0e6b564155a48180c0b6d

  • SHA256

    3263a18b551e568dd7d8de093e759ef58c98d619ab124b94de9043ac66a31155

  • SHA512

    0ff7a49d3b9acbf9231749ea069c3b30ddffb77ef56e6c1305673a2073802a003713cefb37f99b3c9003e46fbcc7ecaeb05ab7c08f0522f64540d530082e975f

  • SSDEEP

    768:eu7RATMUu4f7RDdP6NM8I52VNbvdFsDJ4rTDis3UozO9:TRAC4fNDdP6N5pd+DGzzO9

Malware Config

Extracted

Family

mirai

Botnet

LZRD

Targets

    • Target

      3263a18b551e568dd7d8de093e759ef58c98d619ab124b94de9043ac66a31155.elf

    • Size

      38KB

    • MD5

      1ce2e418d0e3f0998df57506b584bc24

    • SHA1

      bdd4ea908c8f874c9dc0e6b564155a48180c0b6d

    • SHA256

      3263a18b551e568dd7d8de093e759ef58c98d619ab124b94de9043ac66a31155

    • SHA512

      0ff7a49d3b9acbf9231749ea069c3b30ddffb77ef56e6c1305673a2073802a003713cefb37f99b3c9003e46fbcc7ecaeb05ab7c08f0522f64540d530082e975f

    • SSDEEP

      768:eu7RATMUu4f7RDdP6NM8I52VNbvdFsDJ4rTDis3UozO9:TRAC4fNDdP6N5pd+DGzzO9

    • Mirai

      Mirai is a prevalent Linux malware infecting exposed network devices.

    • Mirai family

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    • Enumerates running processes

      Discovers information about currently running processes on the system

    • Writes file to system bin folder

MITRE ATT&CK Enterprise v15

Tasks