General

  • Target

    8abfd4e84b2b6021db43c48d285f8fd8ec0c04add48ed3fe139ed55a2b9afadc.elf

  • Size

    24KB

  • Sample

    241205-dezyaavnax

  • MD5

    e91958d68dff4e9447e129700cc1f520

  • SHA1

    82bbd987b34c81a632edce4514bfb8d9b05a3571

  • SHA256

    8abfd4e84b2b6021db43c48d285f8fd8ec0c04add48ed3fe139ed55a2b9afadc

  • SHA512

    3c3dc3d26d32774e2136728cc3d34b5dd86c0ff385156423c23608e24c55dded2fa77ad1cde0ccc4a2b7030dfc34765b930f4f7ebdc6fa4436606c16570d790f

  • SSDEEP

    768:oCrQlS07dEv0UXqUhvQE+CXQKMQKCXBpMZqEWvh:/QlS07FUXqIYSXQKqu0q7

Malware Config

Extracted

Family

mirai

Botnet

LZRD

Targets

    • Target

      8abfd4e84b2b6021db43c48d285f8fd8ec0c04add48ed3fe139ed55a2b9afadc.elf

    • Size

      24KB

    • MD5

      e91958d68dff4e9447e129700cc1f520

    • SHA1

      82bbd987b34c81a632edce4514bfb8d9b05a3571

    • SHA256

      8abfd4e84b2b6021db43c48d285f8fd8ec0c04add48ed3fe139ed55a2b9afadc

    • SHA512

      3c3dc3d26d32774e2136728cc3d34b5dd86c0ff385156423c23608e24c55dded2fa77ad1cde0ccc4a2b7030dfc34765b930f4f7ebdc6fa4436606c16570d790f

    • SSDEEP

      768:oCrQlS07dEv0UXqUhvQE+CXQKMQKCXBpMZqEWvh:/QlS07FUXqIYSXQKqu0q7

    • Mirai

      Mirai is a prevalent Linux malware infecting exposed network devices.

    • Mirai family

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    • Writes file to system bin folder

MITRE ATT&CK Enterprise v15

Tasks