General

  • Target

    98e5634d3ac10b50b0bdeb0f925d98201c10c9743a829125d7f323b5b28b486c.elf

  • Size

    24KB

  • Sample

    241231-c7f57ssrht

  • MD5

    8b4beb13f7163c0bdfc10a573f22d202

  • SHA1

    41f4ff8938e7ebe5967e66d640bf4bbc358b913d

  • SHA256

    98e5634d3ac10b50b0bdeb0f925d98201c10c9743a829125d7f323b5b28b486c

  • SHA512

    6fb1faa63b736adc50edd7355baa9c2405b9d201f575ae068f9f1666988fdf67d8dfb524f426bea5f5b566c97e01930858c519ae9b627ec7171088ff2312072e

  • SSDEEP

    768:oCrQlS07dEv0UXqUhvQE+CXQKMQKCXBpeZqEWvN:/QlS07FUXqIYSXQKquyqz

Malware Config

Extracted

Family

mirai

Botnet

LZRD

Targets

    • Target

      98e5634d3ac10b50b0bdeb0f925d98201c10c9743a829125d7f323b5b28b486c.elf

    • Size

      24KB

    • MD5

      8b4beb13f7163c0bdfc10a573f22d202

    • SHA1

      41f4ff8938e7ebe5967e66d640bf4bbc358b913d

    • SHA256

      98e5634d3ac10b50b0bdeb0f925d98201c10c9743a829125d7f323b5b28b486c

    • SHA512

      6fb1faa63b736adc50edd7355baa9c2405b9d201f575ae068f9f1666988fdf67d8dfb524f426bea5f5b566c97e01930858c519ae9b627ec7171088ff2312072e

    • SSDEEP

      768:oCrQlS07dEv0UXqUhvQE+CXQKMQKCXBpeZqEWvN:/QlS07FUXqIYSXQKquyqz

    • Mirai

      Mirai is a prevalent Linux malware infecting exposed network devices.

    • Mirai family

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    • Writes file to system bin folder

MITRE ATT&CK Enterprise v15

Tasks