General

  • Target

    70642c98ccbfa71a3304777137766d79.bin

  • Size

    54KB

  • Sample

    250101-bp32ks1qar

  • MD5

    b9dbf638f1e3d7826ea5991748d32e51

  • SHA1

    859394e56c3674901bdc1e0cf3d2cc1a3c000e56

  • SHA256

    48e89d3c5ce39a94dec8b9de4d4f6e5bbddb6ceb519cdfbacdbeb7f2e9e79059

  • SHA512

    ab1a6e1ccc9ea2e96a2e311a0999bf138aa311f5c16f430868336df7a6648c221310394e8428a12843d908bdf3a3e9850b1bec316d102198c1ab0fedc6a39fce

  • SSDEEP

    1536:qBwxzgalvBpIpWF5TOlLwIs66rYk4hWVW:q2tga3pIuSLwz6UKh9

Malware Config

Extracted

Family

mirai

Botnet

LZRD

Targets

    • Target

      57f3497dad4a83ff52ea99689e6846d1517b76cc53b4e713aa05ae780d352048.elf

    • Size

      55KB

    • MD5

      70642c98ccbfa71a3304777137766d79

    • SHA1

      bb0daf5567654b7c9fe2857555106bc15f4d3ec8

    • SHA256

      57f3497dad4a83ff52ea99689e6846d1517b76cc53b4e713aa05ae780d352048

    • SHA512

      f64818ce02cefccab32899477108a891b432da76fac4b98fb7a3b471213830a1da150e3dd01a93a932b8d82c4cc8cb264b2906b3aab89a32bd9336e7fb41c18c

    • SSDEEP

      1536:p1a8dTH9uN4PlTOyQvUaVJwdlEo1JLrflkkggnV:nhb9jdSyyUoJwdlEALTl1nV

    • Mirai

      Mirai is a prevalent Linux malware infecting exposed network devices.

    • Mirai family

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    • Enumerates running processes

      Discovers information about currently running processes on the system

    • Writes file to system bin folder

MITRE ATT&CK Enterprise v15

Tasks