General

  • Target

    f195cdd4036cac5a1da990f18b46e73b3cdcbde669481662b077c03ba5eea080.elf

  • Size

    23KB

  • Sample

    241215-ernapavrdj

  • MD5

    040d6bf67864ae8cdec915537bbabe6d

  • SHA1

    a78ebe1b49ee4a728974f8a14e9590cb89d74290

  • SHA256

    f195cdd4036cac5a1da990f18b46e73b3cdcbde669481662b077c03ba5eea080

  • SHA512

    ab7eca411658de8c11bd6c74342d1b05d856a96e29dad11c1e7623967a97476caac341003f268cf2afe0e2587d6434504210bbeac830ba12ca46e51371b591fc

  • SSDEEP

    384:neD8ZSH2LLZUYyGZbsOiTrowSN9rnZMINlphQ/HYtuiclmdzJgGlzDpH7uNj1JA3:neD8ZSWvZHZbs1row697qohQvg9MizJx

Malware Config

Extracted

Family

mirai

Botnet

LZRD

Targets

    • Target

      f195cdd4036cac5a1da990f18b46e73b3cdcbde669481662b077c03ba5eea080.elf

    • Size

      23KB

    • MD5

      040d6bf67864ae8cdec915537bbabe6d

    • SHA1

      a78ebe1b49ee4a728974f8a14e9590cb89d74290

    • SHA256

      f195cdd4036cac5a1da990f18b46e73b3cdcbde669481662b077c03ba5eea080

    • SHA512

      ab7eca411658de8c11bd6c74342d1b05d856a96e29dad11c1e7623967a97476caac341003f268cf2afe0e2587d6434504210bbeac830ba12ca46e51371b591fc

    • SSDEEP

      384:neD8ZSH2LLZUYyGZbsOiTrowSN9rnZMINlphQ/HYtuiclmdzJgGlzDpH7uNj1JA3:neD8ZSWvZHZbs1row697qohQvg9MizJx

    • Mirai

      Mirai is a prevalent Linux malware infecting exposed network devices.

    • Mirai family

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    • Writes file to system bin folder

MITRE ATT&CK Enterprise v15

Tasks