General

  • Target

    c5f9a7dd4828076854bbb1298f3ead45eda7efe8652d451180eae57e28a46378.elf

  • Size

    60KB

  • Sample

    241228-c9tjbavmgl

  • MD5

    266c8ebfd5b020ed5aeaf34b529ed505

  • SHA1

    017a68168b04199d230ec7661e4d595251e22200

  • SHA256

    c5f9a7dd4828076854bbb1298f3ead45eda7efe8652d451180eae57e28a46378

  • SHA512

    aa032ae15a711d6181698b31eb3dd4521ccefe85b553d1749c37e7731b45bf5c98fa100b2b1783f1b699f0cb68f2e0f1f283be3ded5e357fa2ed96b7c5bb2d7a

  • SSDEEP

    1536:zVQSmwtMJXmejtZqBLzTfLTM5Tfv83KJ2crl2EWD:zVywt8XZKLzTfLgTX83KHl2EWD

Malware Config

Extracted

Family

mirai

Botnet

LZRD

Targets

    • Target

      c5f9a7dd4828076854bbb1298f3ead45eda7efe8652d451180eae57e28a46378.elf

    • Size

      60KB

    • MD5

      266c8ebfd5b020ed5aeaf34b529ed505

    • SHA1

      017a68168b04199d230ec7661e4d595251e22200

    • SHA256

      c5f9a7dd4828076854bbb1298f3ead45eda7efe8652d451180eae57e28a46378

    • SHA512

      aa032ae15a711d6181698b31eb3dd4521ccefe85b553d1749c37e7731b45bf5c98fa100b2b1783f1b699f0cb68f2e0f1f283be3ded5e357fa2ed96b7c5bb2d7a

    • SSDEEP

      1536:zVQSmwtMJXmejtZqBLzTfLTM5Tfv83KJ2crl2EWD:zVywt8XZKLzTfLgTX83KHl2EWD

    • Mirai

      Mirai is a prevalent Linux malware infecting exposed network devices.

    • Mirai family

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    • Enumerates running processes

      Discovers information about currently running processes on the system

    • Writes file to system bin folder

MITRE ATT&CK Enterprise v15

Tasks