General

  • Target

    06581d763c82e7cd6484b61a27f6694b350783bfdd20c19b5487b8317060d6a4.elf

  • Size

    23KB

  • Sample

    241202-cftbfstmbs

  • MD5

    97be2ce1b649c7e814368a7478a6dd8f

  • SHA1

    0174d2ae1f0e72e3794274ad2ba50f61029ee38a

  • SHA256

    06581d763c82e7cd6484b61a27f6694b350783bfdd20c19b5487b8317060d6a4

  • SHA512

    44b7d4dc6a6dac486c56ad6dbdef9922f4560a64aae3c4a80721d4bde08886ea2569cfcdf1922be6f50532591d0de4afbc825fe819de38300f3020856e13d8b1

  • SSDEEP

    384:neD8ZSH2LLZUYyGZbsOiTrowSN9rnZMINlphQ/HYtuiB8mdzJgGlzDpH7uNj1JAS:neD8ZSWvZHZbs1row697qohQvg9B8iz2

Malware Config

Extracted

Family

mirai

Botnet

LZRD

Targets

    • Target

      06581d763c82e7cd6484b61a27f6694b350783bfdd20c19b5487b8317060d6a4.elf

    • Size

      23KB

    • MD5

      97be2ce1b649c7e814368a7478a6dd8f

    • SHA1

      0174d2ae1f0e72e3794274ad2ba50f61029ee38a

    • SHA256

      06581d763c82e7cd6484b61a27f6694b350783bfdd20c19b5487b8317060d6a4

    • SHA512

      44b7d4dc6a6dac486c56ad6dbdef9922f4560a64aae3c4a80721d4bde08886ea2569cfcdf1922be6f50532591d0de4afbc825fe819de38300f3020856e13d8b1

    • SSDEEP

      384:neD8ZSH2LLZUYyGZbsOiTrowSN9rnZMINlphQ/HYtuiB8mdzJgGlzDpH7uNj1JAS:neD8ZSWvZHZbs1row697qohQvg9B8iz2

    • Mirai

      Mirai is a prevalent Linux malware infecting exposed network devices.

    • Mirai family

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    • Enumerates running processes

      Discovers information about currently running processes on the system

    • Writes file to system bin folder

MITRE ATT&CK Enterprise v15

Tasks