General

  • Target

    15bc2a89777d52fbd23efcbefce26ec1ba2574e847303405025c3d972ee7f241.elf

  • Size

    21KB

  • Sample

    241119-cpfrqayelf

  • MD5

    51ee4385be225d38e50e958a5cfbf8e1

  • SHA1

    1f180934d8eea4188548bb123abca836851de1b9

  • SHA256

    15bc2a89777d52fbd23efcbefce26ec1ba2574e847303405025c3d972ee7f241

  • SHA512

    02f41c5a27b1cc19f70f4a438e928c96296bc8d83386d94c0dc12be3a83189879713d37838097f614b4238901155e2e990e758571104ca681baa3b8c6772f3c5

  • SSDEEP

    384:vvtIoZxrSniaXs+qx+bwqPX+VOcFd5fHq52lxj/fyhymdGUop5hB:vvQn4j+ZO5fKAlxGs3Uozb

Malware Config

Extracted

Family

mirai

Botnet

LZRD

Targets

    • Target

      15bc2a89777d52fbd23efcbefce26ec1ba2574e847303405025c3d972ee7f241.elf

    • Size

      21KB

    • MD5

      51ee4385be225d38e50e958a5cfbf8e1

    • SHA1

      1f180934d8eea4188548bb123abca836851de1b9

    • SHA256

      15bc2a89777d52fbd23efcbefce26ec1ba2574e847303405025c3d972ee7f241

    • SHA512

      02f41c5a27b1cc19f70f4a438e928c96296bc8d83386d94c0dc12be3a83189879713d37838097f614b4238901155e2e990e758571104ca681baa3b8c6772f3c5

    • SSDEEP

      384:vvtIoZxrSniaXs+qx+bwqPX+VOcFd5fHq52lxj/fyhymdGUop5hB:vvQn4j+ZO5fKAlxGs3Uozb

    • Mirai

      Mirai is a prevalent Linux malware infecting exposed network devices.

    • Mirai family

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    • Enumerates running processes

      Discovers information about currently running processes on the system

    • Writes file to system bin folder

MITRE ATT&CK Enterprise v15

Tasks