General

  • Target

    4da7a7fd1a27fbdecf1ea7d0568b8581c3ff2114428609d2a8e0ef869d8d30e2.elf

  • Size

    29KB

  • Sample

    241231-cv9a8ayrbn

  • MD5

    8eba0ecf452fc9acc48a1d57d26605b0

  • SHA1

    13c65ec19921aa5af7aa62e0e5647032b6c11b1f

  • SHA256

    4da7a7fd1a27fbdecf1ea7d0568b8581c3ff2114428609d2a8e0ef869d8d30e2

  • SHA512

    b8490ab0e8e3e01abef0b5cf3e096e2b94d7b4d2166a170a4356727d8b69a55a4cd8e840ceda65b20ede230cc7ada7c9c268024e97c0260286a560ec43c2f487

  • SSDEEP

    768:b9AnzCIsLO6jOFmDXfSIU86MkEST68sKxqfh7HO086Rezs3Uoz2:bmzCIsyLFmDvo4kd6phTO0nMez2

Malware Config

Extracted

Family

mirai

Botnet

LZRD

Targets

    • Target

      4da7a7fd1a27fbdecf1ea7d0568b8581c3ff2114428609d2a8e0ef869d8d30e2.elf

    • Size

      29KB

    • MD5

      8eba0ecf452fc9acc48a1d57d26605b0

    • SHA1

      13c65ec19921aa5af7aa62e0e5647032b6c11b1f

    • SHA256

      4da7a7fd1a27fbdecf1ea7d0568b8581c3ff2114428609d2a8e0ef869d8d30e2

    • SHA512

      b8490ab0e8e3e01abef0b5cf3e096e2b94d7b4d2166a170a4356727d8b69a55a4cd8e840ceda65b20ede230cc7ada7c9c268024e97c0260286a560ec43c2f487

    • SSDEEP

      768:b9AnzCIsLO6jOFmDXfSIU86MkEST68sKxqfh7HO086Rezs3Uoz2:bmzCIsyLFmDvo4kd6phTO0nMez2

    • Mirai

      Mirai is a prevalent Linux malware infecting exposed network devices.

    • Mirai family

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    • Enumerates running processes

      Discovers information about currently running processes on the system

    • Writes file to system bin folder

MITRE ATT&CK Enterprise v15

Tasks