General

  • Target

    a69d840b7f32694d0cb26524ca117b6a645359901411ecc5c1d5467b3ba8de95.elf

  • Size

    45KB

  • Sample

    241209-c9c7bsylcz

  • MD5

    b587f4a1e1f6d355db37ef3cbc9d8813

  • SHA1

    5a5e525c829f7df295d125a4044bab3ea4ce2711

  • SHA256

    a69d840b7f32694d0cb26524ca117b6a645359901411ecc5c1d5467b3ba8de95

  • SHA512

    35b8ee6155070025145d3ad760fb1a2a9c39354cf5d44d63eae7424defac4a402b470dfa496502b92623b970a19baffcaa7a095ff3e509e10cf3bd3a3bae7696

  • SSDEEP

    768:JW2myW5zrY3m+KDOtELVpuyUEQNIM4ZktwkVlXFbkdzxe9q3UELMIk9r/e/lQMqU:A7d5zrY3mVqtSEyUE0IM4Fk7FbkdzpLv

Malware Config

Extracted

Family

mirai

Botnet

LZRD

Targets

    • Target

      a69d840b7f32694d0cb26524ca117b6a645359901411ecc5c1d5467b3ba8de95.elf

    • Size

      45KB

    • MD5

      b587f4a1e1f6d355db37ef3cbc9d8813

    • SHA1

      5a5e525c829f7df295d125a4044bab3ea4ce2711

    • SHA256

      a69d840b7f32694d0cb26524ca117b6a645359901411ecc5c1d5467b3ba8de95

    • SHA512

      35b8ee6155070025145d3ad760fb1a2a9c39354cf5d44d63eae7424defac4a402b470dfa496502b92623b970a19baffcaa7a095ff3e509e10cf3bd3a3bae7696

    • SSDEEP

      768:JW2myW5zrY3m+KDOtELVpuyUEQNIM4ZktwkVlXFbkdzxe9q3UELMIk9r/e/lQMqU:A7d5zrY3mVqtSEyUE0IM4Fk7FbkdzpLv

    • Mirai

      Mirai is a prevalent Linux malware infecting exposed network devices.

    • Mirai family

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    • Enumerates running processes

      Discovers information about currently running processes on the system

    • Writes file to system bin folder

MITRE ATT&CK Enterprise v15

Tasks