General

  • Target

    4ff8dbffec454937c38216cdf4824b9f78c704fdf5a965722a4fcffc4c034cd4.elf

  • Size

    27KB

  • Sample

    241231-cwd7gayrcp

  • MD5

    b9946dfcdc347f2081666e3502b3e0c1

  • SHA1

    6de9dc290b4764fc14d38a581f15f995272d1760

  • SHA256

    4ff8dbffec454937c38216cdf4824b9f78c704fdf5a965722a4fcffc4c034cd4

  • SHA512

    9837bca34f760fdd434f79c666f34ec673ccd93b99541008da4648deda56974525da8a421e4f7a9569b5b33302006267d852a37eba35c86627d034c521298d32

  • SSDEEP

    768:Hac0rOyubkgG13ShHdYHBR2RmY9zlx0SsC:6c0KFq3w9YHXqhJx3

Malware Config

Extracted

Family

mirai

Botnet

LZRD

Targets

    • Target

      4ff8dbffec454937c38216cdf4824b9f78c704fdf5a965722a4fcffc4c034cd4.elf

    • Size

      27KB

    • MD5

      b9946dfcdc347f2081666e3502b3e0c1

    • SHA1

      6de9dc290b4764fc14d38a581f15f995272d1760

    • SHA256

      4ff8dbffec454937c38216cdf4824b9f78c704fdf5a965722a4fcffc4c034cd4

    • SHA512

      9837bca34f760fdd434f79c666f34ec673ccd93b99541008da4648deda56974525da8a421e4f7a9569b5b33302006267d852a37eba35c86627d034c521298d32

    • SSDEEP

      768:Hac0rOyubkgG13ShHdYHBR2RmY9zlx0SsC:6c0KFq3w9YHXqhJx3

    • Mirai

      Mirai is a prevalent Linux malware infecting exposed network devices.

    • Mirai family

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    • Enumerates running processes

      Discovers information about currently running processes on the system

    • Writes file to system bin folder

MITRE ATT&CK Enterprise v15

Tasks