General

  • Target

    byte.x86.elf

  • Size

    39KB

  • Sample

    241225-mah9easkbk

  • MD5

    2c34b1d26adb50c974d1d390199331b6

  • SHA1

    827616062ac11405ebe097d44438aca19b013569

  • SHA256

    5eacaa1cdd540e88cd6cc9e21f1d00af5aa564821103806302b98fe132e7855e

  • SHA512

    3d4101885f85846e2eab8927c8c8fcf8cd34410e5f7670a0a12f63a6e6c41a054ff22d7f96cdc68889bf1cc52ee541282a3f80a1dd71efc6247c59fde2b10e58

  • SSDEEP

    768:oCvR44PLfnqsB4UzbYuC4BNeF0Y6722iEZiLwp1VuSorn3NLJIy:oi3P7n7B4UzyFR6CfEcsVujrD7

Malware Config

Extracted

Family

mirai

Botnet

LZRD

Targets

    • Target

      byte.x86.elf

    • Size

      39KB

    • MD5

      2c34b1d26adb50c974d1d390199331b6

    • SHA1

      827616062ac11405ebe097d44438aca19b013569

    • SHA256

      5eacaa1cdd540e88cd6cc9e21f1d00af5aa564821103806302b98fe132e7855e

    • SHA512

      3d4101885f85846e2eab8927c8c8fcf8cd34410e5f7670a0a12f63a6e6c41a054ff22d7f96cdc68889bf1cc52ee541282a3f80a1dd71efc6247c59fde2b10e58

    • SSDEEP

      768:oCvR44PLfnqsB4UzbYuC4BNeF0Y6722iEZiLwp1VuSorn3NLJIy:oi3P7n7B4UzyFR6CfEcsVujrD7

    • Mirai

      Mirai is a prevalent Linux malware infecting exposed network devices.

    • Mirai family

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    • Enumerates running processes

      Discovers information about currently running processes on the system

MITRE ATT&CK Enterprise v15

Tasks