General

  • Target

    d05ecd33ac222d685da971fec3f5b2975ce4bd86504e322fae35706224b452a7.elf

  • Size

    20KB

  • Sample

    241126-dx4n7ayldp

  • MD5

    c152cd6247675be061a98fefd7bda338

  • SHA1

    d6bc62b0712e66eea2e8e2cecdb69490605e3291

  • SHA256

    d05ecd33ac222d685da971fec3f5b2975ce4bd86504e322fae35706224b452a7

  • SHA512

    b4599906211a2dd820bfee6f8ee99d38b98f064e59d2532ef8201491f9369b8cdc02ba2cc8a8fde38c011242bd428035039dc6c22f6e939eb54ad06c10b5f723

  • SSDEEP

    384:Mg4Lpj8s/qPui8uZxoIA57RWQjJiEVi+ZkXaQNAr8vcoBAvP+qNV+KLebRt1jSy0:M98o08kxofBE+ZkXaT47C2Epit1Z0

Malware Config

Extracted

Family

mirai

Botnet

LZRD

Targets

    • Target

      d05ecd33ac222d685da971fec3f5b2975ce4bd86504e322fae35706224b452a7.elf

    • Size

      20KB

    • MD5

      c152cd6247675be061a98fefd7bda338

    • SHA1

      d6bc62b0712e66eea2e8e2cecdb69490605e3291

    • SHA256

      d05ecd33ac222d685da971fec3f5b2975ce4bd86504e322fae35706224b452a7

    • SHA512

      b4599906211a2dd820bfee6f8ee99d38b98f064e59d2532ef8201491f9369b8cdc02ba2cc8a8fde38c011242bd428035039dc6c22f6e939eb54ad06c10b5f723

    • SSDEEP

      384:Mg4Lpj8s/qPui8uZxoIA57RWQjJiEVi+ZkXaQNAr8vcoBAvP+qNV+KLebRt1jSy0:M98o08kxofBE+ZkXaT47C2Epit1Z0

    • Mirai

      Mirai is a prevalent Linux malware infecting exposed network devices.

    • Mirai family

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    • Enumerates running processes

      Discovers information about currently running processes on the system

    • Writes file to system bin folder

MITRE ATT&CK Enterprise v15

Tasks