General

  • Target

    302bc8811041c2f816f8bf82fed28473.bin

  • Size

    23KB

  • Sample

    241210-bgp5rasrcn

  • MD5

    a010b74751e91518bd42e362ab36c19a

  • SHA1

    33b651aadf6547f7f41a7276e1e948b8dc5c1646

  • SHA256

    b365b4040120a47a1248db50be997c9f78a6b663ecec54565b21ad0b572fc928

  • SHA512

    5ac977a695dc8b6cfc5bf4f0091f30542d39f1d7bf23c4d5babeecedfd2da7fd915fdf83f25ca62b844ffb942e1206ed155f39b992fe564d84b30886774ff6b8

  • SSDEEP

    384:eL5acxyPfi15CAgr1wbE6Cu6So27XaE0mLLR4oSsBSsO0WbPdI7wEKz9CXG+jm4h:sEcxoK5CJ58E6Cu6n27XaE5fR494FO0N

Malware Config

Extracted

Family

mirai

Botnet

LZRD

Targets

    • Target

      2cdb081c1828de59669f777c0f6a867acde762d2201f169887e33b133a91b568.elf

    • Size

      24KB

    • MD5

      302bc8811041c2f816f8bf82fed28473

    • SHA1

      ebb9ebd1df93353b9d928b609848a775bdeb3071

    • SHA256

      2cdb081c1828de59669f777c0f6a867acde762d2201f169887e33b133a91b568

    • SHA512

      f2c94ef641ef7e42913baef3a4c299f450652b6e22849f0818f6738a7d933dce2002f6b0b3fe8a2553d6ef4658e9cdfb15207289b5e104cdc34479be70df699d

    • SSDEEP

      768:obrQlS07dEv0UXqUhvQE+CXQKMQKCXBpZZqSWvd:4QlS07FUXqIYSXQKquPqF

    • Mirai

      Mirai is a prevalent Linux malware infecting exposed network devices.

    • Mirai family

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    • Enumerates running processes

      Discovers information about currently running processes on the system

    • Writes file to system bin folder

MITRE ATT&CK Enterprise v15

Tasks