General

  • Target

    215af14d531524b2625842b3c5e53194eca55e8b072553ace83bc7ecf4feac33.elf

  • Size

    23KB

  • Sample

    241216-ckapxaznfn

  • MD5

    923e062add0e0cddb1e650f53680b100

  • SHA1

    15990f11a27c06d106f8b5566f932de669ca682f

  • SHA256

    215af14d531524b2625842b3c5e53194eca55e8b072553ace83bc7ecf4feac33

  • SHA512

    13453fed6f9fa9ae72e6a3af4b51f60107ce3f5155f3b1dbc3e23cc2b185b1692546f347fe9d43a12c55b7bdf8f9df9d389e8e3973fc8b79dc9a01f4e5a65397

  • SSDEEP

    384:teD8ZSH2LLZUYyGZbsOiT/5qZB4FQdhL8d/QQ3m6xcJyumdrJgGlzDpH7uNj1JA4:teD8ZSWvZHZbs1/k0M8d/QA0yuirJgGC

Malware Config

Extracted

Family

mirai

Botnet

LZRD

Targets

    • Target

      215af14d531524b2625842b3c5e53194eca55e8b072553ace83bc7ecf4feac33.elf

    • Size

      23KB

    • MD5

      923e062add0e0cddb1e650f53680b100

    • SHA1

      15990f11a27c06d106f8b5566f932de669ca682f

    • SHA256

      215af14d531524b2625842b3c5e53194eca55e8b072553ace83bc7ecf4feac33

    • SHA512

      13453fed6f9fa9ae72e6a3af4b51f60107ce3f5155f3b1dbc3e23cc2b185b1692546f347fe9d43a12c55b7bdf8f9df9d389e8e3973fc8b79dc9a01f4e5a65397

    • SSDEEP

      384:teD8ZSH2LLZUYyGZbsOiT/5qZB4FQdhL8d/QQ3m6xcJyumdrJgGlzDpH7uNj1JA4:teD8ZSWvZHZbs1/k0M8d/QA0yuirJgGC

    • Mirai

      Mirai is a prevalent Linux malware infecting exposed network devices.

    • Mirai family

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    • Writes file to system bin folder

MITRE ATT&CK Enterprise v15

Tasks