General

  • Target

    1d527eb33d504aa5f19fc15da542a1e6911bc07d751ab4570ba49b159569681f.elf

  • Size

    22KB

  • Sample

    241203-cll5bszqfl

  • MD5

    fabfa526cad5319365ea6653e6f9ced8

  • SHA1

    136bc476e87c8abd1139876951b2f9d7d5987bac

  • SHA256

    1d527eb33d504aa5f19fc15da542a1e6911bc07d751ab4570ba49b159569681f

  • SHA512

    3aaae3ebc9f2c1e28eda4a8857f051f76666657436a77bbd13e3c2cc60bf2f9f3b5ecca984c84e6f43acc5fd14a0827c16926d55c52f4ca7df764a790cc065a0

  • SSDEEP

    384:BPF1Pel7ZYiR5YBuukX3R993wleTUUrbpcRChgnNMlfrpyd7lr8aBThN2lM5B7hi:B91PIZvRZZhzkiUURWChgnNwydJXB1Ng

Malware Config

Extracted

Family

mirai

Botnet

LZRD

Targets

    • Target

      1d527eb33d504aa5f19fc15da542a1e6911bc07d751ab4570ba49b159569681f.elf

    • Size

      22KB

    • MD5

      fabfa526cad5319365ea6653e6f9ced8

    • SHA1

      136bc476e87c8abd1139876951b2f9d7d5987bac

    • SHA256

      1d527eb33d504aa5f19fc15da542a1e6911bc07d751ab4570ba49b159569681f

    • SHA512

      3aaae3ebc9f2c1e28eda4a8857f051f76666657436a77bbd13e3c2cc60bf2f9f3b5ecca984c84e6f43acc5fd14a0827c16926d55c52f4ca7df764a790cc065a0

    • SSDEEP

      384:BPF1Pel7ZYiR5YBuukX3R993wleTUUrbpcRChgnNMlfrpyd7lr8aBThN2lM5B7hi:B91PIZvRZZhzkiUURWChgnNwydJXB1Ng

    • Mirai

      Mirai is a prevalent Linux malware infecting exposed network devices.

    • Mirai family

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    • Enumerates running processes

      Discovers information about currently running processes on the system

    • Writes file to system bin folder

MITRE ATT&CK Enterprise v15

Tasks