General

  • Target

    9a66e1e9d95c8f688cb9345a3ccdfe19495aa027fd90027d33e6a0aad564af90.elf

  • Size

    45KB

  • Sample

    241221-dc6caa1nck

  • MD5

    3af288dd8f7ed5bd8f3c06d549145029

  • SHA1

    2f2e3240ecd339e8062ea13b71b2f1555185d1a4

  • SHA256

    9a66e1e9d95c8f688cb9345a3ccdfe19495aa027fd90027d33e6a0aad564af90

  • SHA512

    a64c11ac737f8735b7c96dfd8ffa1342b6c3599b0d16b17f19414488dbb2f480f981fe8d607155bb64fc3301bc721b858466580f39d149a450c6f4d6936f94ec

  • SSDEEP

    768:D/TYCoIxdEk+AxoTZAZHFeq8b3z9q3UELbUXfi6nVMQHI4vcGpvM:DECFd+A6YHAxyLRQZM

Malware Config

Extracted

Family

mirai

Botnet

LZRD

Targets

    • Target

      9a66e1e9d95c8f688cb9345a3ccdfe19495aa027fd90027d33e6a0aad564af90.elf

    • Size

      45KB

    • MD5

      3af288dd8f7ed5bd8f3c06d549145029

    • SHA1

      2f2e3240ecd339e8062ea13b71b2f1555185d1a4

    • SHA256

      9a66e1e9d95c8f688cb9345a3ccdfe19495aa027fd90027d33e6a0aad564af90

    • SHA512

      a64c11ac737f8735b7c96dfd8ffa1342b6c3599b0d16b17f19414488dbb2f480f981fe8d607155bb64fc3301bc721b858466580f39d149a450c6f4d6936f94ec

    • SSDEEP

      768:D/TYCoIxdEk+AxoTZAZHFeq8b3z9q3UELbUXfi6nVMQHI4vcGpvM:DECFd+A6YHAxyLRQZM

    • Mirai

      Mirai is a prevalent Linux malware infecting exposed network devices.

    • Mirai family

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    • Enumerates running processes

      Discovers information about currently running processes on the system

    • Writes file to system bin folder

MITRE ATT&CK Enterprise v15

Tasks