General

  • Target

    230e3798b253e7f40cc7d18dc239dbe48844a0751891c09ec2da5e6b05c3eb53.elf

  • Size

    26KB

  • Sample

    241221-cscjgazrcj

  • MD5

    11c02735cf1ab6fa2b9013c7c58a43d7

  • SHA1

    7a2eb458ca7a426754f5af7ef1ae4fc50409e4a5

  • SHA256

    230e3798b253e7f40cc7d18dc239dbe48844a0751891c09ec2da5e6b05c3eb53

  • SHA512

    8532dd5566736d6bfc5a0caa0f847ed3f423bc18d32d822e690d271f3def3a0db2ada53d36553ae9ed91452e87f093e4c75645cad5bc245672328348315c049a

  • SSDEEP

    768:QxJnN5wwUcgxbm9h57/GFh9QpZ+pG4s3Uozhl:ncjzp/vZaYzhl

Malware Config

Extracted

Family

mirai

Botnet

LZRD

Targets

    • Target

      230e3798b253e7f40cc7d18dc239dbe48844a0751891c09ec2da5e6b05c3eb53.elf

    • Size

      26KB

    • MD5

      11c02735cf1ab6fa2b9013c7c58a43d7

    • SHA1

      7a2eb458ca7a426754f5af7ef1ae4fc50409e4a5

    • SHA256

      230e3798b253e7f40cc7d18dc239dbe48844a0751891c09ec2da5e6b05c3eb53

    • SHA512

      8532dd5566736d6bfc5a0caa0f847ed3f423bc18d32d822e690d271f3def3a0db2ada53d36553ae9ed91452e87f093e4c75645cad5bc245672328348315c049a

    • SSDEEP

      768:QxJnN5wwUcgxbm9h57/GFh9QpZ+pG4s3Uozhl:ncjzp/vZaYzhl

    • Mirai

      Mirai is a prevalent Linux malware infecting exposed network devices.

    • Mirai family

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    • Enumerates running processes

      Discovers information about currently running processes on the system

    • Writes file to system bin folder

MITRE ATT&CK Enterprise v15

Tasks