General

  • Target

    5af8f85e085ba5d6a9c8b513b78e62af9ef6c9a5e8c789950b7816f3cd744236.elf

  • Size

    24KB

  • Sample

    241226-cmg7rsvjhp

  • MD5

    69907ef1bb7ba49e4fa81023b6434a84

  • SHA1

    a59034294b111ce415a2d5203b2687639fb49dd5

  • SHA256

    5af8f85e085ba5d6a9c8b513b78e62af9ef6c9a5e8c789950b7816f3cd744236

  • SHA512

    9f234317645818ac7ef49334b105e2dc54a319a24ab29ee51b4f446d9f5382a8162048cb241a3d40d8453e23cc07630cc0d3a28ef4f28fcd8e5e4d8b4e6a6050

  • SSDEEP

    768:oCrQlS07dEv0UXqUhvQE+CXQKMQKCXBpvbZqEWvL:/QlS07FUXqIYSXQKqulqh

Malware Config

Extracted

Family

mirai

Botnet

LZRD

Targets

    • Target

      5af8f85e085ba5d6a9c8b513b78e62af9ef6c9a5e8c789950b7816f3cd744236.elf

    • Size

      24KB

    • MD5

      69907ef1bb7ba49e4fa81023b6434a84

    • SHA1

      a59034294b111ce415a2d5203b2687639fb49dd5

    • SHA256

      5af8f85e085ba5d6a9c8b513b78e62af9ef6c9a5e8c789950b7816f3cd744236

    • SHA512

      9f234317645818ac7ef49334b105e2dc54a319a24ab29ee51b4f446d9f5382a8162048cb241a3d40d8453e23cc07630cc0d3a28ef4f28fcd8e5e4d8b4e6a6050

    • SSDEEP

      768:oCrQlS07dEv0UXqUhvQE+CXQKMQKCXBpvbZqEWvL:/QlS07FUXqIYSXQKqulqh

    • Mirai

      Mirai is a prevalent Linux malware infecting exposed network devices.

    • Mirai family

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    • Writes file to system bin folder

MITRE ATT&CK Enterprise v15

Tasks