General

  • Target

    93f5d8522a46c05cd6b45dddabe94ac173202df3eb96da8338b2ee7ecb6edff9.elf

  • Size

    21KB

  • Sample

    241226-cq531avjas

  • MD5

    87635ae37b3feaef31ce1057aa870e7c

  • SHA1

    dae5f41544ad32dea571652fce154cd19045f5ea

  • SHA256

    93f5d8522a46c05cd6b45dddabe94ac173202df3eb96da8338b2ee7ecb6edff9

  • SHA512

    f5238b5bfe54465921e06d4ba5396dbb3ddeaae858f11cf4b3b3efd5939527514267b54b11a7dda0ff39fb9dcfe2eaa03cfceb5c6342c7fd7e623056e8537715

  • SSDEEP

    384:vvtIoZxrSniaXs+qx+bwqPX+VOcFd5fHq52lxjQLhymdGUop5h3:vvQn4j+ZO5fKAlxsLs3Uozt

Malware Config

Extracted

Family

mirai

Botnet

LZRD

Targets

    • Target

      93f5d8522a46c05cd6b45dddabe94ac173202df3eb96da8338b2ee7ecb6edff9.elf

    • Size

      21KB

    • MD5

      87635ae37b3feaef31ce1057aa870e7c

    • SHA1

      dae5f41544ad32dea571652fce154cd19045f5ea

    • SHA256

      93f5d8522a46c05cd6b45dddabe94ac173202df3eb96da8338b2ee7ecb6edff9

    • SHA512

      f5238b5bfe54465921e06d4ba5396dbb3ddeaae858f11cf4b3b3efd5939527514267b54b11a7dda0ff39fb9dcfe2eaa03cfceb5c6342c7fd7e623056e8537715

    • SSDEEP

      384:vvtIoZxrSniaXs+qx+bwqPX+VOcFd5fHq52lxjQLhymdGUop5h3:vvQn4j+ZO5fKAlxsLs3Uozt

    • Mirai

      Mirai is a prevalent Linux malware infecting exposed network devices.

    • Mirai family

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    • Enumerates running processes

      Discovers information about currently running processes on the system

    • Writes file to system bin folder

MITRE ATT&CK Enterprise v15

Tasks