General

  • Target

    bffc0b923efab28f6fa96aa9db459193da608dd26226124dfeecbe3957602869.elf

  • Size

    45KB

  • Sample

    241231-dbzs4stlft

  • MD5

    3dee7a742c3240832d92af16796cbf41

  • SHA1

    be1443888c2bbfd454511ae89d7088a48f704fdc

  • SHA256

    bffc0b923efab28f6fa96aa9db459193da608dd26226124dfeecbe3957602869

  • SHA512

    d145d1f33d609880468730e3290725e259f3d62b87147de764ee621cababe4ab92045a01cb06d4518cc7e1c8af4e38016cda423dab5d3ac570c60af2d835cec1

  • SSDEEP

    768:D/TYCoIxdEk+AxoTZAZHFeq8b35sLN9q3UELbUXfi6nVMQHI4vcGpvb:DECFd+A6YHAxqgLRQZb

Malware Config

Extracted

Family

mirai

Botnet

LZRD

Targets

    • Target

      bffc0b923efab28f6fa96aa9db459193da608dd26226124dfeecbe3957602869.elf

    • Size

      45KB

    • MD5

      3dee7a742c3240832d92af16796cbf41

    • SHA1

      be1443888c2bbfd454511ae89d7088a48f704fdc

    • SHA256

      bffc0b923efab28f6fa96aa9db459193da608dd26226124dfeecbe3957602869

    • SHA512

      d145d1f33d609880468730e3290725e259f3d62b87147de764ee621cababe4ab92045a01cb06d4518cc7e1c8af4e38016cda423dab5d3ac570c60af2d835cec1

    • SSDEEP

      768:D/TYCoIxdEk+AxoTZAZHFeq8b35sLN9q3UELbUXfi6nVMQHI4vcGpvb:DECFd+A6YHAxqgLRQZb

    • Mirai

      Mirai is a prevalent Linux malware infecting exposed network devices.

    • Mirai family

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    • Writes file to system bin folder

MITRE ATT&CK Enterprise v15

Tasks