General

  • Target

    8d78df2168c69653c987155194247ccd402bd933c690b51b45535439ca4eb959.elf

  • Size

    23KB

  • Sample

    241231-c5837szmhr

  • MD5

    1dd5edb43cfbb103dfca5e7b3cf4966c

  • SHA1

    4450cd64e4e0aa7820c3bb8f18063ccf7534fbef

  • SHA256

    8d78df2168c69653c987155194247ccd402bd933c690b51b45535439ca4eb959

  • SHA512

    177aec6bf6ec7e790c499797187c0bda6a0b1176464ff1e549b5029b98c250facdd0a925f73ac9a12c2defb012e44932a7ece25bd7146a37a0cc158bdef10077

  • SSDEEP

    384:YeD8ZSH2LLZUYyGZbsOiTrowSN9rnZMINlphQ/HYtuiOemdtJgGlzDpH7uNj1JAh:YeD8ZSWvZHZbs1row697qohQvg9litJr

Malware Config

Extracted

Family

mirai

Botnet

LZRD

Targets

    • Target

      8d78df2168c69653c987155194247ccd402bd933c690b51b45535439ca4eb959.elf

    • Size

      23KB

    • MD5

      1dd5edb43cfbb103dfca5e7b3cf4966c

    • SHA1

      4450cd64e4e0aa7820c3bb8f18063ccf7534fbef

    • SHA256

      8d78df2168c69653c987155194247ccd402bd933c690b51b45535439ca4eb959

    • SHA512

      177aec6bf6ec7e790c499797187c0bda6a0b1176464ff1e549b5029b98c250facdd0a925f73ac9a12c2defb012e44932a7ece25bd7146a37a0cc158bdef10077

    • SSDEEP

      384:YeD8ZSH2LLZUYyGZbsOiTrowSN9rnZMINlphQ/HYtuiOemdtJgGlzDpH7uNj1JAh:YeD8ZSWvZHZbs1row697qohQvg9litJr

    • Mirai

      Mirai is a prevalent Linux malware infecting exposed network devices.

    • Mirai family

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    • Writes file to system bin folder

MITRE ATT&CK Enterprise v15

Tasks