General

  • Target

    09249f0de05e521c3eda4d43d09343f6108d3f59cd5d3056e5dbfcfb4cca342f.elf

  • Size

    45KB

  • Sample

    241216-cf2mtsxrhw

  • MD5

    7e09c5fd1a2407b1af66d5b00b12d87f

  • SHA1

    10f034c43ccb844574aeb5bcd1dfcfe70050a2e5

  • SHA256

    09249f0de05e521c3eda4d43d09343f6108d3f59cd5d3056e5dbfcfb4cca342f

  • SHA512

    c966ae3f60ed07b150b2f1f9f964a186bd2c811dcc0cb386290e60188c9104fc49e6f515448347d4908891f3d5ceeff8b068ead4750230ec29f3053f7a77b95d

  • SSDEEP

    768:g/TYCoIxYc7rI0QBsRvNlJxiWO6i9q3UELbUXfi6nVMQHI4vcGpvY:gECFScnmBsRvNlJxiW9XLRQZY

Malware Config

Extracted

Family

mirai

Botnet

LZRD

Targets

    • Target

      09249f0de05e521c3eda4d43d09343f6108d3f59cd5d3056e5dbfcfb4cca342f.elf

    • Size

      45KB

    • MD5

      7e09c5fd1a2407b1af66d5b00b12d87f

    • SHA1

      10f034c43ccb844574aeb5bcd1dfcfe70050a2e5

    • SHA256

      09249f0de05e521c3eda4d43d09343f6108d3f59cd5d3056e5dbfcfb4cca342f

    • SHA512

      c966ae3f60ed07b150b2f1f9f964a186bd2c811dcc0cb386290e60188c9104fc49e6f515448347d4908891f3d5ceeff8b068ead4750230ec29f3053f7a77b95d

    • SSDEEP

      768:g/TYCoIxYc7rI0QBsRvNlJxiWO6i9q3UELbUXfi6nVMQHI4vcGpvY:gECFScnmBsRvNlJxiW9XLRQZY

    • Mirai

      Mirai is a prevalent Linux malware infecting exposed network devices.

    • Mirai family

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    • Writes file to system bin folder

MITRE ATT&CK Enterprise v15

Tasks