General

  • Target

    331bebe826a14405235d045ae84311f010d09e8055e2613d564a3486d33d19a8.elf

  • Size

    45KB

  • Sample

    241215-cl7e9ssqfk

  • MD5

    c71c786ee8f5e62b1841eb25c0a8b993

  • SHA1

    e68c120009c4c4fa822fa2a917da0dc8907442dc

  • SHA256

    331bebe826a14405235d045ae84311f010d09e8055e2613d564a3486d33d19a8

  • SHA512

    306e0ac515172b42c68d84576c8c481208bccf656ff86e4a06715c708df76b04a461bdd6c8d96d0f19665dbf9dd5c0528a5ebea9aa8754e673f5be270e367e10

  • SSDEEP

    768:5/TYCoIxdEk+AxoTZAZHFeq8b3t9q3UELbUXfi6nVMQHI4vcGpvn:5ECFd+A6YHAxALRQZn

Malware Config

Extracted

Family

mirai

Botnet

LZRD

Targets

    • Target

      331bebe826a14405235d045ae84311f010d09e8055e2613d564a3486d33d19a8.elf

    • Size

      45KB

    • MD5

      c71c786ee8f5e62b1841eb25c0a8b993

    • SHA1

      e68c120009c4c4fa822fa2a917da0dc8907442dc

    • SHA256

      331bebe826a14405235d045ae84311f010d09e8055e2613d564a3486d33d19a8

    • SHA512

      306e0ac515172b42c68d84576c8c481208bccf656ff86e4a06715c708df76b04a461bdd6c8d96d0f19665dbf9dd5c0528a5ebea9aa8754e673f5be270e367e10

    • SSDEEP

      768:5/TYCoIxdEk+AxoTZAZHFeq8b3t9q3UELbUXfi6nVMQHI4vcGpvn:5ECFd+A6YHAxALRQZn

    • Mirai

      Mirai is a prevalent Linux malware infecting exposed network devices.

    • Mirai family

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    • Enumerates running processes

      Discovers information about currently running processes on the system

    • Writes file to system bin folder

MITRE ATT&CK Enterprise v15

Tasks