General

  • Target

    6f4b2ca72110e08f4a14ccfe634cfe7296914e8e8c65e4de037d3c85f40101ae.elf

  • Size

    31KB

  • Sample

    241231-c13qmazkfq

  • MD5

    2af268efed968357e391ab576fc973c4

  • SHA1

    90d2eb946f39110a1a1768de197d5b2592c32906

  • SHA256

    6f4b2ca72110e08f4a14ccfe634cfe7296914e8e8c65e4de037d3c85f40101ae

  • SHA512

    753e6159a6085f846ad7bc6cddf5d0eae592351ada2b344fdbd8c0ce2b6981746b579085f373634adcbd29668cf9ce1979fa7a5f58f05f5bbee6f5405e52c4f1

  • SSDEEP

    768:hROI+KZnfryc3i9gtz8ubtmMP1USJgGlzDpbuR1JO:ywnDVYuxmMuWVJuY

Malware Config

Extracted

Family

mirai

Botnet

LZRD

Targets

    • Target

      6f4b2ca72110e08f4a14ccfe634cfe7296914e8e8c65e4de037d3c85f40101ae.elf

    • Size

      31KB

    • MD5

      2af268efed968357e391ab576fc973c4

    • SHA1

      90d2eb946f39110a1a1768de197d5b2592c32906

    • SHA256

      6f4b2ca72110e08f4a14ccfe634cfe7296914e8e8c65e4de037d3c85f40101ae

    • SHA512

      753e6159a6085f846ad7bc6cddf5d0eae592351ada2b344fdbd8c0ce2b6981746b579085f373634adcbd29668cf9ce1979fa7a5f58f05f5bbee6f5405e52c4f1

    • SSDEEP

      768:hROI+KZnfryc3i9gtz8ubtmMP1USJgGlzDpbuR1JO:ywnDVYuxmMuWVJuY

    • Mirai

      Mirai is a prevalent Linux malware infecting exposed network devices.

    • Mirai family

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    • Enumerates running processes

      Discovers information about currently running processes on the system

    • Writes file to system bin folder

MITRE ATT&CK Enterprise v15

Tasks