General

  • Target

    1892755d731b2df075f180aae5d0d2f12d850e9a010c0e35ac5301e0f2215f17.elf

  • Size

    28KB

  • Sample

    241227-cj3z3ayqex

  • MD5

    c9a45363adb65be812b630cd8390f350

  • SHA1

    f48f9d420adec8bc3a1096d624dd7f8c37d781d5

  • SHA256

    1892755d731b2df075f180aae5d0d2f12d850e9a010c0e35ac5301e0f2215f17

  • SHA512

    0ba40250f77cc02953fc318cc98156cabdb05901d5a56b1a509097734035d117e934fb640a79b762c099447ce96a123b173942c168b9c93564f60e6b201072e0

  • SSDEEP

    768:Ugkmuy81jI9DKQ1JIhvxh4y3sQVepACuvq:UuGi9D71wmy8QMSi

Malware Config

Extracted

Family

mirai

Botnet

LZRD

Targets

    • Target

      1892755d731b2df075f180aae5d0d2f12d850e9a010c0e35ac5301e0f2215f17.elf

    • Size

      28KB

    • MD5

      c9a45363adb65be812b630cd8390f350

    • SHA1

      f48f9d420adec8bc3a1096d624dd7f8c37d781d5

    • SHA256

      1892755d731b2df075f180aae5d0d2f12d850e9a010c0e35ac5301e0f2215f17

    • SHA512

      0ba40250f77cc02953fc318cc98156cabdb05901d5a56b1a509097734035d117e934fb640a79b762c099447ce96a123b173942c168b9c93564f60e6b201072e0

    • SSDEEP

      768:Ugkmuy81jI9DKQ1JIhvxh4y3sQVepACuvq:UuGi9D71wmy8QMSi

    • Mirai

      Mirai is a prevalent Linux malware infecting exposed network devices.

    • Mirai family

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    • Enumerates running processes

      Discovers information about currently running processes on the system

    • Writes file to system bin folder

MITRE ATT&CK Enterprise v15

Tasks