General

  • Target

    57f3497dad4a83ff52ea99689e6846d1517b76cc53b4e713aa05ae780d352048.elf

  • Size

    55KB

  • Sample

    241231-cxpdtszjar

  • MD5

    70642c98ccbfa71a3304777137766d79

  • SHA1

    bb0daf5567654b7c9fe2857555106bc15f4d3ec8

  • SHA256

    57f3497dad4a83ff52ea99689e6846d1517b76cc53b4e713aa05ae780d352048

  • SHA512

    f64818ce02cefccab32899477108a891b432da76fac4b98fb7a3b471213830a1da150e3dd01a93a932b8d82c4cc8cb264b2906b3aab89a32bd9336e7fb41c18c

  • SSDEEP

    1536:p1a8dTH9uN4PlTOyQvUaVJwdlEo1JLrflkkggnV:nhb9jdSyyUoJwdlEALTl1nV

Malware Config

Extracted

Family

mirai

Botnet

LZRD

Targets

    • Target

      57f3497dad4a83ff52ea99689e6846d1517b76cc53b4e713aa05ae780d352048.elf

    • Size

      55KB

    • MD5

      70642c98ccbfa71a3304777137766d79

    • SHA1

      bb0daf5567654b7c9fe2857555106bc15f4d3ec8

    • SHA256

      57f3497dad4a83ff52ea99689e6846d1517b76cc53b4e713aa05ae780d352048

    • SHA512

      f64818ce02cefccab32899477108a891b432da76fac4b98fb7a3b471213830a1da150e3dd01a93a932b8d82c4cc8cb264b2906b3aab89a32bd9336e7fb41c18c

    • SSDEEP

      1536:p1a8dTH9uN4PlTOyQvUaVJwdlEo1JLrflkkggnV:nhb9jdSyyUoJwdlEALTl1nV

    • Mirai

      Mirai is a prevalent Linux malware infecting exposed network devices.

    • Mirai family

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    • Enumerates running processes

      Discovers information about currently running processes on the system

    • Writes file to system bin folder

MITRE ATT&CK Enterprise v15

Tasks