General

  • Target

    75754fcc1c6ecbdee1bc04eb2e4a986d6fb12a63e8a6b663a012ff41b031aef6.elf

  • Size

    28KB

  • Sample

    241231-c25avazlcr

  • MD5

    d2610e796559edd586be4f3cfea659da

  • SHA1

    67ac4e25ed9856b839f2b11c32e758766a140e23

  • SHA256

    75754fcc1c6ecbdee1bc04eb2e4a986d6fb12a63e8a6b663a012ff41b031aef6

  • SHA512

    910228016a57f6c76fcf29e7bd0a4d79a6772cda30489b99d9a10b92a00f56fc6829b35460ee09bc99c9fa7dc9607763dd01f39c0730c9975988c595c58bdf7a

  • SSDEEP

    768:0IUEbJVnDejywrBh61e+bRTCfol+52qCu:qqyhrB0e+bsfoW

Malware Config

Extracted

Family

mirai

Botnet

LZRD

Targets

    • Target

      75754fcc1c6ecbdee1bc04eb2e4a986d6fb12a63e8a6b663a012ff41b031aef6.elf

    • Size

      28KB

    • MD5

      d2610e796559edd586be4f3cfea659da

    • SHA1

      67ac4e25ed9856b839f2b11c32e758766a140e23

    • SHA256

      75754fcc1c6ecbdee1bc04eb2e4a986d6fb12a63e8a6b663a012ff41b031aef6

    • SHA512

      910228016a57f6c76fcf29e7bd0a4d79a6772cda30489b99d9a10b92a00f56fc6829b35460ee09bc99c9fa7dc9607763dd01f39c0730c9975988c595c58bdf7a

    • SSDEEP

      768:0IUEbJVnDejywrBh61e+bRTCfol+52qCu:qqyhrB0e+bsfoW

    • Mirai

      Mirai is a prevalent Linux malware infecting exposed network devices.

    • Mirai family

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    • Enumerates running processes

      Discovers information about currently running processes on the system

    • Writes file to system bin folder

MITRE ATT&CK Enterprise v15

Tasks