General

  • Target

    00a683af920363be18187b06f45ef5dd1d3e7b3a451155a97e2de295e8740269.elf

  • Size

    30KB

  • Sample

    241231-cfkpba1mcy

  • MD5

    ba61381aa2f02065a84b093bedb7ff7b

  • SHA1

    a4277e46a6ce63cef670171f3c06bb8783530d09

  • SHA256

    00a683af920363be18187b06f45ef5dd1d3e7b3a451155a97e2de295e8740269

  • SHA512

    3c452ae4956b64521b7dceac3542deb5bf957191eed011d8a7126610d9b2b280412db48b71abbc67b36c46bc8d0863f76b2d8ab74cfd000c5c6544f66b158f79

  • SSDEEP

    768:g/qvfZk5zP1HDd+OMKCqCSeR753zJ0lJgGlzDpbuR1Jf:tvgzPdMOMKCt57lzMVJuJ

Malware Config

Extracted

Family

mirai

Botnet

LZRD

Targets

    • Target

      00a683af920363be18187b06f45ef5dd1d3e7b3a451155a97e2de295e8740269.elf

    • Size

      30KB

    • MD5

      ba61381aa2f02065a84b093bedb7ff7b

    • SHA1

      a4277e46a6ce63cef670171f3c06bb8783530d09

    • SHA256

      00a683af920363be18187b06f45ef5dd1d3e7b3a451155a97e2de295e8740269

    • SHA512

      3c452ae4956b64521b7dceac3542deb5bf957191eed011d8a7126610d9b2b280412db48b71abbc67b36c46bc8d0863f76b2d8ab74cfd000c5c6544f66b158f79

    • SSDEEP

      768:g/qvfZk5zP1HDd+OMKCqCSeR753zJ0lJgGlzDpbuR1Jf:tvgzPdMOMKCt57lzMVJuJ

    • Mirai

      Mirai is a prevalent Linux malware infecting exposed network devices.

    • Mirai family

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    • Writes file to system bin folder

MITRE ATT&CK Enterprise v15

Tasks