General

  • Target

    ub8ehJSePAfc9FYqZIT6.x86_64.elf

  • Size

    36KB

  • Sample

    241226-zx1heszphm

  • MD5

    8c12d2392db8546a0f1a870c8d8da4bb

  • SHA1

    41857b0229bb9533a6e9949b30b593504ab05404

  • SHA256

    c161ac5c4cf291df85f5aa76370cce82b05a99901821ef294052ab788e1e4479

  • SHA512

    6c47d0d9c80681443b8fab1490ab9eb7081a5aa3242b26dc7e38789a1e8d8825b32b0e95209de17df338f15a6900e9d39e906005e9dc660f86292944209a3323

  • SSDEEP

    768:GLR/W7ThZdFW7v2Sv4BB4lA+YVzzHiyCxVwpGtj94/fL/1RWx0o:GV2zdIT5v4BBH+Ydi76MSj6R

Malware Config

Extracted

Family

mirai

Botnet

LZRD

Targets

    • Target

      ub8ehJSePAfc9FYqZIT6.x86_64.elf

    • Size

      36KB

    • MD5

      8c12d2392db8546a0f1a870c8d8da4bb

    • SHA1

      41857b0229bb9533a6e9949b30b593504ab05404

    • SHA256

      c161ac5c4cf291df85f5aa76370cce82b05a99901821ef294052ab788e1e4479

    • SHA512

      6c47d0d9c80681443b8fab1490ab9eb7081a5aa3242b26dc7e38789a1e8d8825b32b0e95209de17df338f15a6900e9d39e906005e9dc660f86292944209a3323

    • SSDEEP

      768:GLR/W7ThZdFW7v2Sv4BB4lA+YVzzHiyCxVwpGtj94/fL/1RWx0o:GV2zdIT5v4BBH+Ydi76MSj6R

    • Mirai

      Mirai is a prevalent Linux malware infecting exposed network devices.

    • Mirai family

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    • Enumerates running processes

      Discovers information about currently running processes on the system

    • Writes file to system bin folder

MITRE ATT&CK Enterprise v15

Tasks