General

  • Target

    28cbd7d1beebf5a6017418a62fa511ce7cb576fa02ab03f4c3ea0ef3cdb478e4.elf

  • Size

    38KB

  • Sample

    241210-cvdjjszqbv

  • MD5

    5440e4651db03fb8ef90b4631b927ebb

  • SHA1

    8c7457e5451524b5f951aa7c284018eeb5edb7e1

  • SHA256

    28cbd7d1beebf5a6017418a62fa511ce7cb576fa02ab03f4c3ea0ef3cdb478e4

  • SHA512

    6f81a51113fcb958f8bd893db385ee1408934527e5b30a43068198b7e9f4398535f7e592eeb72d60199c4aceccf09cb3fc1383b6c3d41bc935b1304536073cc2

  • SSDEEP

    768:OBKNWbxNdoZd64sVhUQX9bS9CL+v7TqvnGQre6warL5/+qEn9E6ES+s3UozOa:QQiDdY4hUQNb/yv72vnGFpaH5/qtjzOa

Malware Config

Extracted

Family

mirai

Botnet

LZRD

Targets

    • Target

      28cbd7d1beebf5a6017418a62fa511ce7cb576fa02ab03f4c3ea0ef3cdb478e4.elf

    • Size

      38KB

    • MD5

      5440e4651db03fb8ef90b4631b927ebb

    • SHA1

      8c7457e5451524b5f951aa7c284018eeb5edb7e1

    • SHA256

      28cbd7d1beebf5a6017418a62fa511ce7cb576fa02ab03f4c3ea0ef3cdb478e4

    • SHA512

      6f81a51113fcb958f8bd893db385ee1408934527e5b30a43068198b7e9f4398535f7e592eeb72d60199c4aceccf09cb3fc1383b6c3d41bc935b1304536073cc2

    • SSDEEP

      768:OBKNWbxNdoZd64sVhUQX9bS9CL+v7TqvnGQre6warL5/+qEn9E6ES+s3UozOa:QQiDdY4hUQNb/yv72vnGFpaH5/qtjzOa

    • Mirai

      Mirai is a prevalent Linux malware infecting exposed network devices.

    • Mirai family

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    • Enumerates running processes

      Discovers information about currently running processes on the system

    • Writes file to system bin folder

MITRE ATT&CK Enterprise v15

Tasks