General

  • Target

    7e09c5fd1a2407b1af66d5b00b12d87f.bin

  • Size

    45KB

  • Sample

    241217-btlm4axjen

  • MD5

    650fbacdf7e7779412e557258ca4d970

  • SHA1

    02f971deae08ec8ab7a68c751ab75051a140867a

  • SHA256

    8369257af3613885a8d40830bd5b95fa5b87d0f0f518bc8935183a958d137ede

  • SHA512

    1a675dc33022ee202964ba80212b1ca603bee89b2d1e14781c367c44d993bdfd8e12d75805a4f5844dd763a7fdac2d457a0d647d63cee2d03cd9c6509ec45456

  • SSDEEP

    768:FVQLRb/fm9Cq7oZaQTXwV9AAZ2GEck9LKvAeHBVtigXh/tV2fGESKPzGM:gbmL7odOAAacLPhvigxlVyGESKLt

Malware Config

Extracted

Family

mirai

Botnet

LZRD

Targets

    • Target

      09249f0de05e521c3eda4d43d09343f6108d3f59cd5d3056e5dbfcfb4cca342f.elf

    • Size

      45KB

    • MD5

      7e09c5fd1a2407b1af66d5b00b12d87f

    • SHA1

      10f034c43ccb844574aeb5bcd1dfcfe70050a2e5

    • SHA256

      09249f0de05e521c3eda4d43d09343f6108d3f59cd5d3056e5dbfcfb4cca342f

    • SHA512

      c966ae3f60ed07b150b2f1f9f964a186bd2c811dcc0cb386290e60188c9104fc49e6f515448347d4908891f3d5ceeff8b068ead4750230ec29f3053f7a77b95d

    • SSDEEP

      768:g/TYCoIxYc7rI0QBsRvNlJxiWO6i9q3UELbUXfi6nVMQHI4vcGpvY:gECFScnmBsRvNlJxiW9XLRQZY

    • Mirai

      Mirai is a prevalent Linux malware infecting exposed network devices.

    • Mirai family

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    • Enumerates running processes

      Discovers information about currently running processes on the system

    • Writes file to system bin folder

MITRE ATT&CK Enterprise v15

Tasks