General

  • Target

    2730c95a17ca8400d4daedab03ab5e1f0fec1f8a6dd21d88d8060a1d6d613b77.elf

  • Size

    20KB

  • Sample

    241210-ct7e8svqeq

  • MD5

    af64b1c4bbf91493c0e0d5395aac5ced

  • SHA1

    fe1dd2c44a8ba21429cb60df36447473bcf7e90b

  • SHA256

    2730c95a17ca8400d4daedab03ab5e1f0fec1f8a6dd21d88d8060a1d6d613b77

  • SHA512

    25bbcaac71a6e533eb10efcba54dedc5abeb681702af4c53ec46850e357d380fcc9804c2ee1793ba8f320243eafa8729d20cdb33ebf3261fc1b5617d75e84154

  • SSDEEP

    384:M0DLpj8s/qPui8uZxoIA57RWQjJiEVi+ZkXadmTb+502F2vwA9dWuMW21bAK1oT0:x98o08kxofBE+ZkXaITbp2F2TWul0c5o

Malware Config

Extracted

Family

mirai

Botnet

LZRD

Targets

    • Target

      2730c95a17ca8400d4daedab03ab5e1f0fec1f8a6dd21d88d8060a1d6d613b77.elf

    • Size

      20KB

    • MD5

      af64b1c4bbf91493c0e0d5395aac5ced

    • SHA1

      fe1dd2c44a8ba21429cb60df36447473bcf7e90b

    • SHA256

      2730c95a17ca8400d4daedab03ab5e1f0fec1f8a6dd21d88d8060a1d6d613b77

    • SHA512

      25bbcaac71a6e533eb10efcba54dedc5abeb681702af4c53ec46850e357d380fcc9804c2ee1793ba8f320243eafa8729d20cdb33ebf3261fc1b5617d75e84154

    • SSDEEP

      384:M0DLpj8s/qPui8uZxoIA57RWQjJiEVi+ZkXadmTb+502F2vwA9dWuMW21bAK1oT0:x98o08kxofBE+ZkXaITbp2F2TWul0c5o

    • Mirai

      Mirai is a prevalent Linux malware infecting exposed network devices.

    • Mirai family

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    • Enumerates running processes

      Discovers information about currently running processes on the system

    • Writes file to system bin folder

MITRE ATT&CK Enterprise v15

Tasks