General

  • Target

    186e983595031a11877c037edff0b7faedcc1b852190a3a0146e9541d05a83d8.elf

  • Size

    20KB

  • Sample

    241209-chv8tsspep

  • MD5

    01951b26be11a04ce291fe41e4b506f3

  • SHA1

    b1f268d654af5521f6b63f4f655bed811a1faf3c

  • SHA256

    186e983595031a11877c037edff0b7faedcc1b852190a3a0146e9541d05a83d8

  • SHA512

    6b60b34521df9ed7fa5849a131b21845284966352db900c5ce971f0ecabedb08d8ee17438879fe0e5181fe693a68efb9df1a903fc63f62ce570b306945f7bb51

  • SSDEEP

    384:M0hLpj8s/qPui8uZxoIA57RWQjJiEVi+ZkXaz1Hb+502F2vwA9B1fKVVXA/Syv:T98o08kxofBE+ZkXaVbp2F2n8VVXqv

Malware Config

Extracted

Family

mirai

Botnet

LZRD

Targets

    • Target

      186e983595031a11877c037edff0b7faedcc1b852190a3a0146e9541d05a83d8.elf

    • Size

      20KB

    • MD5

      01951b26be11a04ce291fe41e4b506f3

    • SHA1

      b1f268d654af5521f6b63f4f655bed811a1faf3c

    • SHA256

      186e983595031a11877c037edff0b7faedcc1b852190a3a0146e9541d05a83d8

    • SHA512

      6b60b34521df9ed7fa5849a131b21845284966352db900c5ce971f0ecabedb08d8ee17438879fe0e5181fe693a68efb9df1a903fc63f62ce570b306945f7bb51

    • SSDEEP

      384:M0hLpj8s/qPui8uZxoIA57RWQjJiEVi+ZkXaz1Hb+502F2vwA9B1fKVVXA/Syv:T98o08kxofBE+ZkXaVbp2F2n8VVXqv

    • Mirai

      Mirai is a prevalent Linux malware infecting exposed network devices.

    • Mirai family

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    • Enumerates running processes

      Discovers information about currently running processes on the system

    • Writes file to system bin folder

MITRE ATT&CK Enterprise v15

Tasks