General

  • Target

    9edcacfbfbb25cd2864e431738ec6d8085b5ec241400943b4cc2c9ea7a2fe67c.elf

  • Size

    32KB

  • Sample

    241231-c96hwatket

  • MD5

    e30368ed86531051ae95d0ba79d33d7e

  • SHA1

    cb69227ff998e24c588e67968e6c38437b939524

  • SHA256

    9edcacfbfbb25cd2864e431738ec6d8085b5ec241400943b4cc2c9ea7a2fe67c

  • SHA512

    740d00a37517473848c32c8dc957f1974c801f9279ccbc83ffcaea89ed1c94b292d6e52540565c819f88eb9c7ddc1634e116685c7063f7f7a459c5c100a2f795

  • SSDEEP

    768:Xky7pBOnQthzk8Ya7Fb4ARL1wZK8wTSWujfLm6Wa:Upn4z9Ygb4A51b477L7

Malware Config

Extracted

Family

mirai

Botnet

LZRD

Targets

    • Target

      9edcacfbfbb25cd2864e431738ec6d8085b5ec241400943b4cc2c9ea7a2fe67c.elf

    • Size

      32KB

    • MD5

      e30368ed86531051ae95d0ba79d33d7e

    • SHA1

      cb69227ff998e24c588e67968e6c38437b939524

    • SHA256

      9edcacfbfbb25cd2864e431738ec6d8085b5ec241400943b4cc2c9ea7a2fe67c

    • SHA512

      740d00a37517473848c32c8dc957f1974c801f9279ccbc83ffcaea89ed1c94b292d6e52540565c819f88eb9c7ddc1634e116685c7063f7f7a459c5c100a2f795

    • SSDEEP

      768:Xky7pBOnQthzk8Ya7Fb4ARL1wZK8wTSWujfLm6Wa:Upn4z9Ygb4A51b477L7

    • Mirai

      Mirai is a prevalent Linux malware infecting exposed network devices.

    • Mirai family

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    • Writes file to system bin folder

MITRE ATT&CK Enterprise v15

Tasks