General

  • Target

    01951b26be11a04ce291fe41e4b506f3.bin

  • Size

    20KB

  • Sample

    241210-bcn2wsxpgv

  • MD5

    3e3ff3b486b61122a52cc3dcaa5f3dcd

  • SHA1

    662cf2aac42032f00e1de6e439fe3a9f6217a4f7

  • SHA256

    ecb37b06f750e17e41f27ba2af77b683b42316692fb02038f49e5ba9f1ddb903

  • SHA512

    3dc8f4f46c7da040ef9e89749aaece8d6857f007408df5e8ab4e5ec86bf5e413d2430ef9a62d4756e0ececb2f95cf2ce338596176b70d80e048b0342ca31a04e

  • SSDEEP

    384:KcFdlX5cuyop4pxYz+66cMbZZWuMb17Z8DfY4qXlHR9tzzsdB9Z7SZJxD3c4kR3:HdlX5chjxjcMbzWuVDA4qB/t/sB2L37I

Malware Config

Extracted

Family

mirai

Botnet

LZRD

Targets

    • Target

      186e983595031a11877c037edff0b7faedcc1b852190a3a0146e9541d05a83d8.elf

    • Size

      20KB

    • MD5

      01951b26be11a04ce291fe41e4b506f3

    • SHA1

      b1f268d654af5521f6b63f4f655bed811a1faf3c

    • SHA256

      186e983595031a11877c037edff0b7faedcc1b852190a3a0146e9541d05a83d8

    • SHA512

      6b60b34521df9ed7fa5849a131b21845284966352db900c5ce971f0ecabedb08d8ee17438879fe0e5181fe693a68efb9df1a903fc63f62ce570b306945f7bb51

    • SSDEEP

      384:M0hLpj8s/qPui8uZxoIA57RWQjJiEVi+ZkXaz1Hb+502F2vwA9B1fKVVXA/Syv:T98o08kxofBE+ZkXaVbp2F2n8VVXqv

    • Mirai

      Mirai is a prevalent Linux malware infecting exposed network devices.

    • Mirai family

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    • Enumerates running processes

      Discovers information about currently running processes on the system

    • Writes file to system bin folder

MITRE ATT&CK Enterprise v15

Tasks