General

  • Target

    87635ae37b3feaef31ce1057aa870e7c.bin

  • Size

    21KB

  • Sample

    241227-bybzfsxrfj

  • MD5

    1cc54d7b9549c186273f253acdc2747e

  • SHA1

    81ffd0f1c0fd0bd5117d21deadae450d91365af6

  • SHA256

    db439974abbc1ef00ab5d1286e420dd583782b313e3dd155a3e8fe8552977ee6

  • SHA512

    56da256953a455e4257e7e8334407af2d78690671d3cadae30206837bdb6cc3342ddd3c6edc1ab00a12824c0cc8b2a5e13bb439488ae1395b72af49bf5a4d44a

  • SSDEEP

    384:hrbbVWq42ftH/QermSrgI+iIh1QL6QmS7iqMUfVED5i5R1yHeWr23IICD3:hr94k/vq3I+iIzvQd7iPQE5i5RugG

Malware Config

Extracted

Family

mirai

Botnet

LZRD

Targets

    • Target

      93f5d8522a46c05cd6b45dddabe94ac173202df3eb96da8338b2ee7ecb6edff9.elf

    • Size

      21KB

    • MD5

      87635ae37b3feaef31ce1057aa870e7c

    • SHA1

      dae5f41544ad32dea571652fce154cd19045f5ea

    • SHA256

      93f5d8522a46c05cd6b45dddabe94ac173202df3eb96da8338b2ee7ecb6edff9

    • SHA512

      f5238b5bfe54465921e06d4ba5396dbb3ddeaae858f11cf4b3b3efd5939527514267b54b11a7dda0ff39fb9dcfe2eaa03cfceb5c6342c7fd7e623056e8537715

    • SSDEEP

      384:vvtIoZxrSniaXs+qx+bwqPX+VOcFd5fHq52lxjQLhymdGUop5h3:vvQn4j+ZO5fKAlxsLs3Uozt

    • Mirai

      Mirai is a prevalent Linux malware infecting exposed network devices.

    • Mirai family

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    • Enumerates running processes

      Discovers information about currently running processes on the system

    • Writes file to system bin folder

MITRE ATT&CK Enterprise v15

Tasks