General

  • Target

    ad5560d1cc3e576c3b34dbe6871cdeb2afa4de4293114cae565454f4dc8d89ea.elf

  • Size

    27KB

  • Sample

    241230-c3qtvavnhs

  • MD5

    c8e704d38ddd5650f9a94e4f1e28e6da

  • SHA1

    377624921fe5998f4fa54fd18cdbf2bb54d4d437

  • SHA256

    ad5560d1cc3e576c3b34dbe6871cdeb2afa4de4293114cae565454f4dc8d89ea

  • SHA512

    8e30a51c7fec1dcf1a5e76f5f50da256dcb90e4b0a40222967d39f935489cf91ffb76259a315935fcf062f421e848013e0ba8608c2b69646fb0c6ed7a7c65fdb

  • SSDEEP

    384:AmpTqrBMyz2ZpRcZbsZGBdHIwFrs1PY1a910Jxc5s3ArKKLYF14Bo0MZRWGVCz0Z:AmFqrG9zcZe2HI0rA/9Gxd/14fKWu

Malware Config

Extracted

Family

mirai

Botnet

LZRD

Targets

    • Target

      ad5560d1cc3e576c3b34dbe6871cdeb2afa4de4293114cae565454f4dc8d89ea.elf

    • Size

      27KB

    • MD5

      c8e704d38ddd5650f9a94e4f1e28e6da

    • SHA1

      377624921fe5998f4fa54fd18cdbf2bb54d4d437

    • SHA256

      ad5560d1cc3e576c3b34dbe6871cdeb2afa4de4293114cae565454f4dc8d89ea

    • SHA512

      8e30a51c7fec1dcf1a5e76f5f50da256dcb90e4b0a40222967d39f935489cf91ffb76259a315935fcf062f421e848013e0ba8608c2b69646fb0c6ed7a7c65fdb

    • SSDEEP

      384:AmpTqrBMyz2ZpRcZbsZGBdHIwFrs1PY1a910Jxc5s3ArKKLYF14Bo0MZRWGVCz0Z:AmFqrG9zcZe2HI0rA/9Gxd/14fKWu

    • Mirai

      Mirai is a prevalent Linux malware infecting exposed network devices.

    • Mirai family

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    • Writes file to system bin folder

MITRE ATT&CK Enterprise v15

Tasks