General

  • Target

    fe80a8a8118da4448f8d5b1f79e7c3a6714436f2be0e6cf83c18c1500217f00a.elf

  • Size

    24KB

  • Sample

    241202-dqfnsasjhj

  • MD5

    f1021e0fc4b8f54c6a909d7152265ebd

  • SHA1

    7d174b4b4d2cd375bf4980ad64232e972f218ec6

  • SHA256

    fe80a8a8118da4448f8d5b1f79e7c3a6714436f2be0e6cf83c18c1500217f00a

  • SHA512

    43187d892152d11f57568e7c3931a27c8699bc802dcfc4bf04ad235d56384f8db685e3120124e30dfa9537936440e55c5974950e13693b5adeed5e315535dc23

  • SSDEEP

    768:obrQlS07dEv0UXqUhvQE+CXQKMQKCXBpJZqSWvm:4QlS07FUXqIYSXQKqufqe

Malware Config

Extracted

Family

mirai

Botnet

LZRD

Targets

    • Target

      fe80a8a8118da4448f8d5b1f79e7c3a6714436f2be0e6cf83c18c1500217f00a.elf

    • Size

      24KB

    • MD5

      f1021e0fc4b8f54c6a909d7152265ebd

    • SHA1

      7d174b4b4d2cd375bf4980ad64232e972f218ec6

    • SHA256

      fe80a8a8118da4448f8d5b1f79e7c3a6714436f2be0e6cf83c18c1500217f00a

    • SHA512

      43187d892152d11f57568e7c3931a27c8699bc802dcfc4bf04ad235d56384f8db685e3120124e30dfa9537936440e55c5974950e13693b5adeed5e315535dc23

    • SSDEEP

      768:obrQlS07dEv0UXqUhvQE+CXQKMQKCXBpJZqSWvm:4QlS07FUXqIYSXQKqufqe

    • Mirai

      Mirai is a prevalent Linux malware infecting exposed network devices.

    • Mirai family

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    • Writes file to system bin folder

MITRE ATT&CK Enterprise v15

Tasks