General

  • Target

    6644ed14ccced606696f94783b0ae1eb8e66ddf691c8b2a80f189b2dda400c25.elf

  • Size

    43KB

  • Sample

    241228-cwfqastqay

  • MD5

    bb3c48fea88d7abc045efff46b5d96e6

  • SHA1

    446c06b0671e4324aee88035b2b07895a1853111

  • SHA256

    6644ed14ccced606696f94783b0ae1eb8e66ddf691c8b2a80f189b2dda400c25

  • SHA512

    bf62f7e7be38e7fbc7aadd4b1229387fc8d7e6fb12dec5807dff4251e4917def5ddaa777c4b7e982eaaa6819c368925abbc2ca898e15c09962ac503e984684d6

  • SSDEEP

    768:EnZOKj8x/QSQ3y/4qFTOdeoJWBhdYnjWcBWDW4s5GyZDa6XXbgub49q3UELF:yXwQSYPqFHI8rOjBn4+9DXZhLF

Malware Config

Extracted

Family

mirai

Botnet

LZRD

Targets

    • Target

      6644ed14ccced606696f94783b0ae1eb8e66ddf691c8b2a80f189b2dda400c25.elf

    • Size

      43KB

    • MD5

      bb3c48fea88d7abc045efff46b5d96e6

    • SHA1

      446c06b0671e4324aee88035b2b07895a1853111

    • SHA256

      6644ed14ccced606696f94783b0ae1eb8e66ddf691c8b2a80f189b2dda400c25

    • SHA512

      bf62f7e7be38e7fbc7aadd4b1229387fc8d7e6fb12dec5807dff4251e4917def5ddaa777c4b7e982eaaa6819c368925abbc2ca898e15c09962ac503e984684d6

    • SSDEEP

      768:EnZOKj8x/QSQ3y/4qFTOdeoJWBhdYnjWcBWDW4s5GyZDa6XXbgub49q3UELF:yXwQSYPqFHI8rOjBn4+9DXZhLF

    • Mirai

      Mirai is a prevalent Linux malware infecting exposed network devices.

    • Mirai family

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    • Enumerates running processes

      Discovers information about currently running processes on the system

    • Writes file to system bin folder

MITRE ATT&CK Enterprise v15

Tasks