General

  • Target

    6d87ae9133c84684d8782900275b9b51e33972fe33c46b4671be9fd8fb39df22.elf

  • Size

    38KB

  • Sample

    241226-cm9l1strax

  • MD5

    4d816cb3d5c955fd381ed78242cc44e5

  • SHA1

    2998e268bfae93e8cb68e01bd36832285d266dad

  • SHA256

    6d87ae9133c84684d8782900275b9b51e33972fe33c46b4671be9fd8fb39df22

  • SHA512

    7036342813582c9bddd1d6950693f92fd4ab628533c4216afd3d88f3f308a38f72098391959b3b03e4a3ef3a541bc7037509c5e992c07f8a3b6f7357370dd716

  • SSDEEP

    768:Hu7RATMUu4f7RDdP6NM8I52VNbvdFsDJ4tHWas3UozOP:ARAC4fNDdP6N5pd+DUHOzOP

Malware Config

Extracted

Family

mirai

Botnet

LZRD

Targets

    • Target

      6d87ae9133c84684d8782900275b9b51e33972fe33c46b4671be9fd8fb39df22.elf

    • Size

      38KB

    • MD5

      4d816cb3d5c955fd381ed78242cc44e5

    • SHA1

      2998e268bfae93e8cb68e01bd36832285d266dad

    • SHA256

      6d87ae9133c84684d8782900275b9b51e33972fe33c46b4671be9fd8fb39df22

    • SHA512

      7036342813582c9bddd1d6950693f92fd4ab628533c4216afd3d88f3f308a38f72098391959b3b03e4a3ef3a541bc7037509c5e992c07f8a3b6f7357370dd716

    • SSDEEP

      768:Hu7RATMUu4f7RDdP6NM8I52VNbvdFsDJ4tHWas3UozOP:ARAC4fNDdP6N5pd+DUHOzOP

    • Mirai

      Mirai is a prevalent Linux malware infecting exposed network devices.

    • Mirai family

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    • Enumerates running processes

      Discovers information about currently running processes on the system

    • Writes file to system bin folder

MITRE ATT&CK Enterprise v15

Tasks