General

  • Target

    e607eb93e3ea845180e36a370e26d01f076dae9391800f37191ba3e0ead99bc6.elf

  • Size

    38KB

  • Sample

    241228-deay6avkfs

  • MD5

    a8a91085a707955e357d7fbe5dc9b07d

  • SHA1

    df78901871ab0f242c0879110e9ccd700be99eb6

  • SHA256

    e607eb93e3ea845180e36a370e26d01f076dae9391800f37191ba3e0ead99bc6

  • SHA512

    101556836700492fadfbff4ab783a0ff8dff585a71405ef0377a98bf8f54db60117fb1c3875c6ac617dde5d11fd5a25a9b8a7be10449bb547d0181a114ad49d9

  • SSDEEP

    768:tu7RATMUu4f7RDdP6NM8I52VNbvdFsDJ4OmWxs3UozOV:aRAC4fNDdP6N5pd+DzmWczOV

Malware Config

Extracted

Family

mirai

Botnet

LZRD

Targets

    • Target

      e607eb93e3ea845180e36a370e26d01f076dae9391800f37191ba3e0ead99bc6.elf

    • Size

      38KB

    • MD5

      a8a91085a707955e357d7fbe5dc9b07d

    • SHA1

      df78901871ab0f242c0879110e9ccd700be99eb6

    • SHA256

      e607eb93e3ea845180e36a370e26d01f076dae9391800f37191ba3e0ead99bc6

    • SHA512

      101556836700492fadfbff4ab783a0ff8dff585a71405ef0377a98bf8f54db60117fb1c3875c6ac617dde5d11fd5a25a9b8a7be10449bb547d0181a114ad49d9

    • SSDEEP

      768:tu7RATMUu4f7RDdP6NM8I52VNbvdFsDJ4OmWxs3UozOV:aRAC4fNDdP6N5pd+DzmWczOV

    • Mirai

      Mirai is a prevalent Linux malware infecting exposed network devices.

    • Mirai family

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    • Enumerates running processes

      Discovers information about currently running processes on the system

    • Writes file to system bin folder

MITRE ATT&CK Enterprise v15

Tasks