General

  • Target

    6edaa65ab2c460278bf53876885c0b92477228c907a461ffa62b6c1fabffc66c.elf

  • Size

    23KB

  • Sample

    241221-c591ha1lcj

  • MD5

    63d8d4603d432c5502c083c6f1fa4462

  • SHA1

    8e408e19ad1d055757725fb0a1607b44d48e34b8

  • SHA256

    6edaa65ab2c460278bf53876885c0b92477228c907a461ffa62b6c1fabffc66c

  • SHA512

    01ab941f6a19acd4c791528c0a5d9d261947547a08cfb0e9df346c10ad80ea505e8adaef29f2bb98a12eec57ace9cc72b5301c57b69e70b7ac52445ef09d43fc

  • SSDEEP

    384:MNpB6Yj833S7YSpsGE0m1SAqMaECTS2lMnvk+G38/wYb7fjMWzfdNx7pKgr95+vr:+3j8tB0m1SAiTxqMs/wYbrgghiT

Malware Config

Extracted

Family

mirai

Botnet

LZRD

Targets

    • Target

      6edaa65ab2c460278bf53876885c0b92477228c907a461ffa62b6c1fabffc66c.elf

    • Size

      23KB

    • MD5

      63d8d4603d432c5502c083c6f1fa4462

    • SHA1

      8e408e19ad1d055757725fb0a1607b44d48e34b8

    • SHA256

      6edaa65ab2c460278bf53876885c0b92477228c907a461ffa62b6c1fabffc66c

    • SHA512

      01ab941f6a19acd4c791528c0a5d9d261947547a08cfb0e9df346c10ad80ea505e8adaef29f2bb98a12eec57ace9cc72b5301c57b69e70b7ac52445ef09d43fc

    • SSDEEP

      384:MNpB6Yj833S7YSpsGE0m1SAqMaECTS2lMnvk+G38/wYb7fjMWzfdNx7pKgr95+vr:+3j8tB0m1SAiTxqMs/wYbrgghiT

    • Mirai

      Mirai is a prevalent Linux malware infecting exposed network devices.

    • Mirai family

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    • Enumerates running processes

      Discovers information about currently running processes on the system

    • Writes file to system bin folder

MITRE ATT&CK Enterprise v15

Tasks