General

  • Target

    c77a1d1cc44925c262afef03cbe83c01.bin

  • Size

    35KB

  • Sample

    241224-b6me6aylhq

  • MD5

    0961eb68017f4aa87e7682ee7491f33b

  • SHA1

    3d8ac928e5bfff82484d55eaa4866828f31f50d2

  • SHA256

    7ab17d49b7c8f5d270d507d6e5b9a0e32e2c9b93db1f102a74aed26c131ee7fe

  • SHA512

    62d47e58806bcafa6d33d3c366d126b81254345f4167f17f20eb5865f91d0203503d30fa86be7780b10cbfd2ceacf4d0286e95f4e6e30ce4abeea66c2476480b

  • SSDEEP

    768:wi8vrJluJv4084wTSn9F4wmOnzjapbKosdFnigXSEBupox:wi8vrJgZf8rSn9atOSpbKosfx

Malware Config

Extracted

Family

mirai

Botnet

LZRD

Targets

    • Target

      2c65e1d696a90d109d300248812d730b7a30cda436cccc7df831048a865cef9f.elf

    • Size

      35KB

    • MD5

      c77a1d1cc44925c262afef03cbe83c01

    • SHA1

      8c0902158ea9441a4f527b008af9bf3c51dd94c9

    • SHA256

      2c65e1d696a90d109d300248812d730b7a30cda436cccc7df831048a865cef9f

    • SHA512

      072c8eca585d26dfa9c5f2be434ee259c05b58d40737c08ae5331326424ce9b80784662aa1811517840d7d8a953f654c94bdb48b852e39efd2448472e11396b8

    • SSDEEP

      768:hJTKmOVP3WWkPgb7lPBIqxwQEECBah3zGKWC4DwUs3Uozk:hAmO4POPN5Evo3FAEzk

    • Mirai

      Mirai is a prevalent Linux malware infecting exposed network devices.

    • Mirai family

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    • Enumerates running processes

      Discovers information about currently running processes on the system

    • Writes file to system bin folder

MITRE ATT&CK Enterprise v15

Tasks