General

  • Target

    2c65e1d696a90d109d300248812d730b7a30cda436cccc7df831048a865cef9f.elf

  • Size

    35KB

  • Sample

    241223-cg6ceatqfr

  • MD5

    c77a1d1cc44925c262afef03cbe83c01

  • SHA1

    8c0902158ea9441a4f527b008af9bf3c51dd94c9

  • SHA256

    2c65e1d696a90d109d300248812d730b7a30cda436cccc7df831048a865cef9f

  • SHA512

    072c8eca585d26dfa9c5f2be434ee259c05b58d40737c08ae5331326424ce9b80784662aa1811517840d7d8a953f654c94bdb48b852e39efd2448472e11396b8

  • SSDEEP

    768:hJTKmOVP3WWkPgb7lPBIqxwQEECBah3zGKWC4DwUs3Uozk:hAmO4POPN5Evo3FAEzk

Malware Config

Extracted

Family

mirai

Botnet

LZRD

Targets

    • Target

      2c65e1d696a90d109d300248812d730b7a30cda436cccc7df831048a865cef9f.elf

    • Size

      35KB

    • MD5

      c77a1d1cc44925c262afef03cbe83c01

    • SHA1

      8c0902158ea9441a4f527b008af9bf3c51dd94c9

    • SHA256

      2c65e1d696a90d109d300248812d730b7a30cda436cccc7df831048a865cef9f

    • SHA512

      072c8eca585d26dfa9c5f2be434ee259c05b58d40737c08ae5331326424ce9b80784662aa1811517840d7d8a953f654c94bdb48b852e39efd2448472e11396b8

    • SSDEEP

      768:hJTKmOVP3WWkPgb7lPBIqxwQEECBah3zGKWC4DwUs3Uozk:hAmO4POPN5Evo3FAEzk

    • Mirai

      Mirai is a prevalent Linux malware infecting exposed network devices.

    • Mirai family

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    • Enumerates running processes

      Discovers information about currently running processes on the system

    • Writes file to system bin folder

MITRE ATT&CK Enterprise v15

Tasks