General

  • Target

    26244c3ab68f37450765d949f5224e3f.bin

  • Size

    59KB

  • Sample

    241125-bgvp8szlcw

  • MD5

    822c66f5feb4e571e616fafb7a713d65

  • SHA1

    8544b345a4b8e2b4f4ff5ed090a99f613038ffc3

  • SHA256

    d873f509ac05b39f7c08ed0d6a72357268fb4a579e4af9a3ccd21e2bd5dfeecd

  • SHA512

    79bba4447c9ba123a7865aa4ea67b6b6cf009c806c014c77b4d20ab04de12c3a9f42e6450a7e78c26ea2f65724d5e06fd19518489660a8d3b3a792af12eceb1e

  • SSDEEP

    1536:IWMCc5RM/XCORetvlOYzsHmSplo523xMm82eP0CW:ITCc5i/y1fQ/plc2hXeP0CW

Malware Config

Extracted

Family

mirai

Botnet

LZRD

Targets

    • Target

      7dd48ee3c78c19eadd688198321c42ceab0f2af5f24b3e45ca21cc2c57567beb.elf

    • Size

      60KB

    • MD5

      26244c3ab68f37450765d949f5224e3f

    • SHA1

      49bdc89c4fbb2a708581c6bfb9d243f87f3a1ef2

    • SHA256

      7dd48ee3c78c19eadd688198321c42ceab0f2af5f24b3e45ca21cc2c57567beb

    • SHA512

      fccb71c39cdfab38d55fed2f67b68bb13947d4d81dcb51eb5d01d383f70e2061195142980752e9d596989176b686e4de5d23152c41e02e0e3d653da5ace7dd3b

    • SSDEEP

      1536:eyiqybiQVcnlJIrjhTjFV22QLvCXNv3k6nvrVBaEbA7:ef+GhT5LQL4Nc6vrVZbA7

    • Mirai

      Mirai is a prevalent Linux malware infecting exposed network devices.

    • Mirai family

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    • Enumerates running processes

      Discovers information about currently running processes on the system

    • Writes file to system bin folder

MITRE ATT&CK Enterprise v15

Tasks