General

  • Target

    Satan.x86.elf

  • Size

    37KB

  • Sample

    241123-x53lmsskgt

  • MD5

    54306a728b30e2b126f15055f93b57d2

  • SHA1

    445ab03657be811352559beb40e9ec7855156578

  • SHA256

    9f901cf65b38126d27660797903d8095539a454280cd5464f00a2f6fede4b383

  • SHA512

    1f95b5d2db7ecb7f069805cd340d56dc878646fd20bd74c090e61b4f6d87209d3a86798164b7564fecce6284f76e14d1613917762cd488890143a5c9fbd7526e

  • SSDEEP

    768:d6o76s6sXiWoa2NNeDfv83JcXOx6yaA11kuK5npy5mvvI+fnbcuyD7UrQRjs:M+6TmiWUuD852G1z1GfyYRnouy8ryI

Malware Config

Extracted

Family

mirai

Botnet

LZRD

Targets

    • Target

      Satan.x86.elf

    • Size

      37KB

    • MD5

      54306a728b30e2b126f15055f93b57d2

    • SHA1

      445ab03657be811352559beb40e9ec7855156578

    • SHA256

      9f901cf65b38126d27660797903d8095539a454280cd5464f00a2f6fede4b383

    • SHA512

      1f95b5d2db7ecb7f069805cd340d56dc878646fd20bd74c090e61b4f6d87209d3a86798164b7564fecce6284f76e14d1613917762cd488890143a5c9fbd7526e

    • SSDEEP

      768:d6o76s6sXiWoa2NNeDfv83JcXOx6yaA11kuK5npy5mvvI+fnbcuyD7UrQRjs:M+6TmiWUuD852G1z1GfyYRnouy8ryI

    • Mirai

      Mirai is a prevalent Linux malware infecting exposed network devices.

    • Mirai family

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    • Enumerates running processes

      Discovers information about currently running processes on the system

    • Writes file to system bin folder

MITRE ATT&CK Enterprise v15

Tasks