General

  • Target

    db41931c7733f5086f807f4e01ab87fb1d4dbb60c0f81dfd3ce564b444cdf14d.elf

  • Size

    45KB

  • Sample

    241202-dkkqjswngs

  • MD5

    5ef10adf3247d448cc0a664abefb50ea

  • SHA1

    34e1428b630e5a9e5f3e0fb682a47d213674851c

  • SHA256

    db41931c7733f5086f807f4e01ab87fb1d4dbb60c0f81dfd3ce564b444cdf14d

  • SHA512

    d058dec8c037e7f0946acecf752aae4768292f3d49a1f3741cab8ce4c776ccdda32334c71e019335168cccd351a9d85a0f197e3e0efcb9bf01cd69a124773e25

  • SSDEEP

    768:D/TYCoIxdEk+AxoTZAZHFeq8b3or9q3UELbUXfi6nVMQHI4vcGpv1:DECFd+A6YHAxoKLRQZ1

Malware Config

Extracted

Family

mirai

Botnet

LZRD

Targets

    • Target

      db41931c7733f5086f807f4e01ab87fb1d4dbb60c0f81dfd3ce564b444cdf14d.elf

    • Size

      45KB

    • MD5

      5ef10adf3247d448cc0a664abefb50ea

    • SHA1

      34e1428b630e5a9e5f3e0fb682a47d213674851c

    • SHA256

      db41931c7733f5086f807f4e01ab87fb1d4dbb60c0f81dfd3ce564b444cdf14d

    • SHA512

      d058dec8c037e7f0946acecf752aae4768292f3d49a1f3741cab8ce4c776ccdda32334c71e019335168cccd351a9d85a0f197e3e0efcb9bf01cd69a124773e25

    • SSDEEP

      768:D/TYCoIxdEk+AxoTZAZHFeq8b3or9q3UELbUXfi6nVMQHI4vcGpv1:DECFd+A6YHAxoKLRQZ1

    • Mirai

      Mirai is a prevalent Linux malware infecting exposed network devices.

    • Mirai family

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    • Enumerates running processes

      Discovers information about currently running processes on the system

    • Writes file to system bin folder

MITRE ATT&CK Enterprise v15

Tasks