General

  • Target

    ub8ehJSePAfc9FYqZIT6.x86_64

  • Size

    36KB

  • Sample

    241203-nxcwkstpbt

  • MD5

    9e7bb41e42c7504efec7e836e163fe46

  • SHA1

    549e82f396bff90ac4e3fce59d6c46eadf787ea0

  • SHA256

    9400da273f496e0bd69a0d23db54b495cefbd53d8248ea29ac8bd694c76ea61c

  • SHA512

    71f9cff71695d2ef4302f65d1d0d29c81d22055acfebab07756312bfe5b8a23d599fb1c516bf91627ca81c4a22131328ae47b23b903a2eb84eac0ac05fc433db

  • SSDEEP

    768:4LR/W7TwmFH2FzMhcM8wE1JCbgYzrb+Z80I577tiNd7x0s:4V2wmB3h87JC02HJ7tghN

Malware Config

Extracted

Family

mirai

Botnet

LZRD

Targets

    • Target

      ub8ehJSePAfc9FYqZIT6.x86_64

    • Size

      36KB

    • MD5

      9e7bb41e42c7504efec7e836e163fe46

    • SHA1

      549e82f396bff90ac4e3fce59d6c46eadf787ea0

    • SHA256

      9400da273f496e0bd69a0d23db54b495cefbd53d8248ea29ac8bd694c76ea61c

    • SHA512

      71f9cff71695d2ef4302f65d1d0d29c81d22055acfebab07756312bfe5b8a23d599fb1c516bf91627ca81c4a22131328ae47b23b903a2eb84eac0ac05fc433db

    • SSDEEP

      768:4LR/W7TwmFH2FzMhcM8wE1JCbgYzrb+Z80I577tiNd7x0s:4V2wmB3h87JC02HJ7tghN

    • Mirai

      Mirai is a prevalent Linux malware infecting exposed network devices.

    • Mirai family

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    • Enumerates running processes

      Discovers information about currently running processes on the system

    • Writes file to system bin folder

MITRE ATT&CK Enterprise v15

Tasks