General

  • Target

    7f46cc4adbe3d3801c2a92ef0a433efa38ba983227a158910a2f7d9c124a5ec4.elf

  • Size

    23KB

  • Sample

    241207-dd8tssxrhq

  • MD5

    1f48dd331d55c1b4063c620ee90c741b

  • SHA1

    ba1b11f7e58767712bdc9579dccf3b928e829b42

  • SHA256

    7f46cc4adbe3d3801c2a92ef0a433efa38ba983227a158910a2f7d9c124a5ec4

  • SHA512

    c3e919e5bed69ea4c0fb1e99b0edcc006f15d1c2ef57a65a4ba3b7727869db0d4f9fedac4c1ad7084fe0681eccf0d0eddd10a08f347ecc78cc8f723bd8d17819

  • SSDEEP

    384:neD8ZSH2LLZUYyGZbsOiTrowSN9rnZMINlphQ/HYtuiuPmdzJgGlzDpH7uNj1JAE:neD8ZSWvZHZbs1row697qohQvg9uPizw

Malware Config

Extracted

Family

mirai

Botnet

LZRD

Targets

    • Target

      7f46cc4adbe3d3801c2a92ef0a433efa38ba983227a158910a2f7d9c124a5ec4.elf

    • Size

      23KB

    • MD5

      1f48dd331d55c1b4063c620ee90c741b

    • SHA1

      ba1b11f7e58767712bdc9579dccf3b928e829b42

    • SHA256

      7f46cc4adbe3d3801c2a92ef0a433efa38ba983227a158910a2f7d9c124a5ec4

    • SHA512

      c3e919e5bed69ea4c0fb1e99b0edcc006f15d1c2ef57a65a4ba3b7727869db0d4f9fedac4c1ad7084fe0681eccf0d0eddd10a08f347ecc78cc8f723bd8d17819

    • SSDEEP

      384:neD8ZSH2LLZUYyGZbsOiTrowSN9rnZMINlphQ/HYtuiuPmdzJgGlzDpH7uNj1JAE:neD8ZSWvZHZbs1row697qohQvg9uPizw

    • Mirai

      Mirai is a prevalent Linux malware infecting exposed network devices.

    • Mirai family

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    • Enumerates running processes

      Discovers information about currently running processes on the system

    • Writes file to system bin folder

MITRE ATT&CK Enterprise v15

Tasks