General

  • Target

    c602c049cec1547dd1ba4a5d3602cc3d2e93fbf9e6e1d71f75746376222d88fe.elf

  • Size

    60KB

  • Sample

    241223-cw3vtsvkej

  • MD5

    3718dbace25d67c5df85607840c3ae00

  • SHA1

    36104deb1fa6729423594102773262f8fceb0e71

  • SHA256

    c602c049cec1547dd1ba4a5d3602cc3d2e93fbf9e6e1d71f75746376222d88fe

  • SHA512

    28698230b118900d58ef55cdf0cf67532431df995771281d5f30c36e327e651f8df8f0f4466500ead4ba4734f4913352001b99d9f7fc14cf9d546a27d8249961

  • SSDEEP

    1536:IVQSmwtMJXmejtW6LTM5Tfv83KJ2crl2EW2:IVywt8XZ5LgTX83KHl2EW2

Malware Config

Extracted

Family

mirai

Botnet

LZRD

Targets

    • Target

      c602c049cec1547dd1ba4a5d3602cc3d2e93fbf9e6e1d71f75746376222d88fe.elf

    • Size

      60KB

    • MD5

      3718dbace25d67c5df85607840c3ae00

    • SHA1

      36104deb1fa6729423594102773262f8fceb0e71

    • SHA256

      c602c049cec1547dd1ba4a5d3602cc3d2e93fbf9e6e1d71f75746376222d88fe

    • SHA512

      28698230b118900d58ef55cdf0cf67532431df995771281d5f30c36e327e651f8df8f0f4466500ead4ba4734f4913352001b99d9f7fc14cf9d546a27d8249961

    • SSDEEP

      1536:IVQSmwtMJXmejtW6LTM5Tfv83KJ2crl2EW2:IVywt8XZ5LgTX83KHl2EW2

    • Mirai

      Mirai is a prevalent Linux malware infecting exposed network devices.

    • Mirai family

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    • Enumerates running processes

      Discovers information about currently running processes on the system

    • Writes file to system bin folder

MITRE ATT&CK Enterprise v15

Tasks