General

  • Target

    3408473bdae0a641986a4856749402f701cd170a6e2b2a44fa7db3e3d837dea8.elf

  • Size

    43KB

  • Sample

    241121-et6vtaymgz

  • MD5

    0cf83b88dfbe7c60c484139ca5eca5ad

  • SHA1

    eb88c0f3d1e48e4a43eac8c10a37457d17d6fd3a

  • SHA256

    3408473bdae0a641986a4856749402f701cd170a6e2b2a44fa7db3e3d837dea8

  • SHA512

    456bb92560dbfbbe753b7a4baf6ab1e6dfa91ee3ec7539df5af0e2572ff97a96abda04e881550bead90f236cd0b87b341f4afe9b3394e534d6c5185c3f856f30

  • SSDEEP

    768:EnZOKj8x/QSQ3y/4qFTOdeoJWBhdYnjWcBWDW4s5GyZDa6XXBMKM9q3UEL+:yXwQSYPqFHI8rOjBn4+9DX6KVL+

Malware Config

Extracted

Family

mirai

Botnet

LZRD

Targets

    • Target

      3408473bdae0a641986a4856749402f701cd170a6e2b2a44fa7db3e3d837dea8.elf

    • Size

      43KB

    • MD5

      0cf83b88dfbe7c60c484139ca5eca5ad

    • SHA1

      eb88c0f3d1e48e4a43eac8c10a37457d17d6fd3a

    • SHA256

      3408473bdae0a641986a4856749402f701cd170a6e2b2a44fa7db3e3d837dea8

    • SHA512

      456bb92560dbfbbe753b7a4baf6ab1e6dfa91ee3ec7539df5af0e2572ff97a96abda04e881550bead90f236cd0b87b341f4afe9b3394e534d6c5185c3f856f30

    • SSDEEP

      768:EnZOKj8x/QSQ3y/4qFTOdeoJWBhdYnjWcBWDW4s5GyZDa6XXBMKM9q3UEL+:yXwQSYPqFHI8rOjBn4+9DX6KVL+

    • Mirai

      Mirai is a prevalent Linux malware infecting exposed network devices.

    • Mirai family

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    • Enumerates running processes

      Discovers information about currently running processes on the system

    • Writes file to system bin folder

MITRE ATT&CK Enterprise v15

Tasks