General

  • Target

    ce9e2b9e3cf464bfcbcebec013e8a59dfe109b088bbbdf2cdeecba9e5576047f.elf

  • Size

    60KB

  • Sample

    241210-d3vngasmby

  • MD5

    5b1f7d8968a7f58c40cf5354bbe43dd6

  • SHA1

    68a50f847c474bb21a26e4a28e4b6c024938fa44

  • SHA256

    ce9e2b9e3cf464bfcbcebec013e8a59dfe109b088bbbdf2cdeecba9e5576047f

  • SHA512

    84c3b759a51c30c7a33be0f5c62793cca3e8b91514ad3dddf3075ac9c9ee8fbffea56169bca30d7c943832834060c7009b3cfcc4850fe88dac2364d47601d885

  • SSDEEP

    1536:O7XduYshWhq/HIEy6Og3Nwz9hAy+KtLSM5Tfv83KJGTb6R4V:QdpssMPR9w4y+KtLXTX83K0Tb6R2

Malware Config

Extracted

Family

mirai

Botnet

LZRD

Targets

    • Target

      ce9e2b9e3cf464bfcbcebec013e8a59dfe109b088bbbdf2cdeecba9e5576047f.elf

    • Size

      60KB

    • MD5

      5b1f7d8968a7f58c40cf5354bbe43dd6

    • SHA1

      68a50f847c474bb21a26e4a28e4b6c024938fa44

    • SHA256

      ce9e2b9e3cf464bfcbcebec013e8a59dfe109b088bbbdf2cdeecba9e5576047f

    • SHA512

      84c3b759a51c30c7a33be0f5c62793cca3e8b91514ad3dddf3075ac9c9ee8fbffea56169bca30d7c943832834060c7009b3cfcc4850fe88dac2364d47601d885

    • SSDEEP

      1536:O7XduYshWhq/HIEy6Og3Nwz9hAy+KtLSM5Tfv83KJGTb6R4V:QdpssMPR9w4y+KtLXTX83K0Tb6R2

    • Mirai

      Mirai is a prevalent Linux malware infecting exposed network devices.

    • Mirai family

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    • Enumerates running processes

      Discovers information about currently running processes on the system

    • Writes file to system bin folder

MITRE ATT&CK Enterprise v15

Tasks