General

  • Target

    9bcddc690d77a68cdc4068ebc02c367bbc58053f26749a7a820e5d3d34d58c44.elf

  • Size

    54KB

  • Sample

    241231-c7xg7aznhn

  • MD5

    d3e1dee0e16f2c83a674e001115792ef

  • SHA1

    806f08d4e8813a02f3b45a6986465e0f38225c07

  • SHA256

    9bcddc690d77a68cdc4068ebc02c367bbc58053f26749a7a820e5d3d34d58c44

  • SHA512

    1feae8a01c7f46a2422204282f9b70934add13e577805eeec97b63f4c39bf495c2707b40c7d6211aa2d9dcdf5668fd380e4771400cdfedfe6d8d21cff7d6935e

  • SSDEEP

    1536:4IHiFvo89yZXGH3+0BuSM9LwFFv25L6tBiMvcw:4Xvo89y9QAt9LwvYL23vf

Malware Config

Extracted

Family

mirai

Botnet

LZRD

Targets

    • Target

      9bcddc690d77a68cdc4068ebc02c367bbc58053f26749a7a820e5d3d34d58c44.elf

    • Size

      54KB

    • MD5

      d3e1dee0e16f2c83a674e001115792ef

    • SHA1

      806f08d4e8813a02f3b45a6986465e0f38225c07

    • SHA256

      9bcddc690d77a68cdc4068ebc02c367bbc58053f26749a7a820e5d3d34d58c44

    • SHA512

      1feae8a01c7f46a2422204282f9b70934add13e577805eeec97b63f4c39bf495c2707b40c7d6211aa2d9dcdf5668fd380e4771400cdfedfe6d8d21cff7d6935e

    • SSDEEP

      1536:4IHiFvo89yZXGH3+0BuSM9LwFFv25L6tBiMvcw:4Xvo89y9QAt9LwvYL23vf

    • Mirai

      Mirai is a prevalent Linux malware infecting exposed network devices.

    • Mirai family

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    • Enumerates running processes

      Discovers information about currently running processes on the system

    • Writes file to system bin folder

MITRE ATT&CK Enterprise v15

Tasks