General

  • Target

    ub8ehJSePAfc9FYqZIT6.x86_64.elf

  • Size

    36KB

  • Sample

    241223-cxymhavkfl

  • MD5

    2bd66161d02afa8b3891285f7f9cbfdf

  • SHA1

    2ca808e492bf74c2cb8576f72212d3a88a7bd0af

  • SHA256

    21d663bd5974d560e377afd55d4ebaa86f82427db24b9f888197d1461bba80d1

  • SHA512

    8ded171bb4c03ec978b32048f088f167bc7433192befadb074c6cde71e67be934c9878bd5a1c4b42e5bcfac5682f93882df65ac9cfbcf633e8b450b11bda2574

  • SSDEEP

    768:kLR/W7ThZdFW7v2Sv4BB4lA+YVzzHiyCxVwpGtj94/fL+nHRppWx00:kV2zdIT5v4BBH+Ydi76MSjCxpwB

Malware Config

Extracted

Family

mirai

Botnet

LZRD

Targets

    • Target

      ub8ehJSePAfc9FYqZIT6.x86_64.elf

    • Size

      36KB

    • MD5

      2bd66161d02afa8b3891285f7f9cbfdf

    • SHA1

      2ca808e492bf74c2cb8576f72212d3a88a7bd0af

    • SHA256

      21d663bd5974d560e377afd55d4ebaa86f82427db24b9f888197d1461bba80d1

    • SHA512

      8ded171bb4c03ec978b32048f088f167bc7433192befadb074c6cde71e67be934c9878bd5a1c4b42e5bcfac5682f93882df65ac9cfbcf633e8b450b11bda2574

    • SSDEEP

      768:kLR/W7ThZdFW7v2Sv4BB4lA+YVzzHiyCxVwpGtj94/fL+nHRppWx00:kV2zdIT5v4BBH+Ydi76MSjCxpwB

    • Mirai

      Mirai is a prevalent Linux malware infecting exposed network devices.

    • Mirai family

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    • Enumerates running processes

      Discovers information about currently running processes on the system

    • Writes file to system bin folder

MITRE ATT&CK Enterprise v15

Tasks