General

  • Target

    3718dbace25d67c5df85607840c3ae00.bin

  • Size

    59KB

  • Sample

    241224-bgt4psxlft

  • MD5

    3aa47c8e1a3041e694c0bf0a0f3e4308

  • SHA1

    5e5760ae26134889f99ef877970adde1909cd76a

  • SHA256

    154c39d99aa7caf7481a05cd3528b44a51562f57fd80bc7623ffd7565eb03536

  • SHA512

    fcb018286acc6437e777e0331564c75a83d113e4d3402c1d69156fcdc203c740573d493d168d4ddf82eba9c07579ae864acb08d2de5f4b430209316acb5f4f1e

  • SSDEEP

    1536:F/Wp7bwnUo/84hDx9//+0JEOSXHtoJPs8C7pk:dWGfhttm6N6KyS

Malware Config

Extracted

Family

mirai

Botnet

LZRD

Targets

    • Target

      c602c049cec1547dd1ba4a5d3602cc3d2e93fbf9e6e1d71f75746376222d88fe.elf

    • Size

      60KB

    • MD5

      3718dbace25d67c5df85607840c3ae00

    • SHA1

      36104deb1fa6729423594102773262f8fceb0e71

    • SHA256

      c602c049cec1547dd1ba4a5d3602cc3d2e93fbf9e6e1d71f75746376222d88fe

    • SHA512

      28698230b118900d58ef55cdf0cf67532431df995771281d5f30c36e327e651f8df8f0f4466500ead4ba4734f4913352001b99d9f7fc14cf9d546a27d8249961

    • SSDEEP

      1536:IVQSmwtMJXmejtW6LTM5Tfv83KJ2crl2EW2:IVywt8XZ5LgTX83KHl2EW2

    • Mirai

      Mirai is a prevalent Linux malware infecting exposed network devices.

    • Mirai family

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    • Enumerates running processes

      Discovers information about currently running processes on the system

    • Writes file to system bin folder

MITRE ATT&CK Enterprise v15

Tasks