General

  • Target

    x86.elf

  • Size

    37KB

  • Sample

    241120-w8yana1mat

  • MD5

    edf612986dba9abff11a7530fa06d3c2

  • SHA1

    c39e5ecf48ed660df4c93353744955bebfb91636

  • SHA256

    d7800781555066e97a3165a99ca416c452f0d60d9160fdcc62e842311c8664f0

  • SHA512

    0dd292e9760c9ac15b06809133d8296f21250085c803585be73abcd1d1faacbf07bb28a0703943f65c0bc66e0c6311b3342a1c39e118dfae6491b5f7b7eeda9f

  • SSDEEP

    768:4a+BWS+ZPwIIBPGXna4nvdQL5zc6R96SMO/ieUeSMI68nCmqnbcuyD7UrQRj/:4a+BH+hKBAa4Vcc6RwSMO/ieCME2nouG

Malware Config

Extracted

Family

mirai

Botnet

LZRD

Targets

    • Target

      x86.elf

    • Size

      37KB

    • MD5

      edf612986dba9abff11a7530fa06d3c2

    • SHA1

      c39e5ecf48ed660df4c93353744955bebfb91636

    • SHA256

      d7800781555066e97a3165a99ca416c452f0d60d9160fdcc62e842311c8664f0

    • SHA512

      0dd292e9760c9ac15b06809133d8296f21250085c803585be73abcd1d1faacbf07bb28a0703943f65c0bc66e0c6311b3342a1c39e118dfae6491b5f7b7eeda9f

    • SSDEEP

      768:4a+BWS+ZPwIIBPGXna4nvdQL5zc6R96SMO/ieUeSMI68nCmqnbcuyD7UrQRj/:4a+BH+hKBAa4Vcc6RwSMO/ieCME2nouG

    • Mirai

      Mirai is a prevalent Linux malware infecting exposed network devices.

    • Mirai family

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    • Enumerates running processes

      Discovers information about currently running processes on the system

    • Writes file to system bin folder

MITRE ATT&CK Enterprise v15

Tasks