General

  • Target

    71b871016be20fa759ba75949fe347c3.bin

  • Size

    28KB

  • Sample

    250101-bp56ya1qbj

  • MD5

    a92a6328d577760c613e30e905ec1822

  • SHA1

    9954f38f7b8721b1fc10d16c14eafc020e51bcf3

  • SHA256

    25d7e9f752112ae850cef51d94dc7d08a060e34908adf31a4499ca2dcb8838f9

  • SHA512

    ada6fb1ee7b7f9648fb0aac31dc2398bd9b848c6dfd6027948395e84cea760c144271d24d7ba5d11354b2e923a4adaa12522cdd061f5320ad7c97e6f5aace346

  • SSDEEP

    768:nZG3LrZIk45mVyt77wTx0OmW6Dd3eeDCwbOcjBnHP:nZG3ZIk45gyZce1RRDCwbnjBv

Malware Config

Extracted

Family

mirai

Botnet

LZRD

Targets

    • Target

      530c3553055b0b663df602f0c6c96dc0fc13bb083e05933c3e4302105c16df23.elf

    • Size

      29KB

    • MD5

      71b871016be20fa759ba75949fe347c3

    • SHA1

      ede962eed2a0d0d2719a5effd5cd56853db8ad90

    • SHA256

      530c3553055b0b663df602f0c6c96dc0fc13bb083e05933c3e4302105c16df23

    • SHA512

      56d20794865aaf8c858a21d320a2b9c2a332109f95e3b3b851e92ca7543aabeb2ee76c03f2f86545cae5becfc0bbd21b207528a712d1c07d0ae44ca072d42a31

    • SSDEEP

      768:BuoBswxBxXLTJHmgVEjPT2naWFItenPCb8RgemAZ8QiPqBss3Uozz:UKLxvJHD6TNWytePvZfikzz

    • Mirai

      Mirai is a prevalent Linux malware infecting exposed network devices.

    • Mirai family

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    • Enumerates running processes

      Discovers information about currently running processes on the system

    • Writes file to system bin folder

MITRE ATT&CK Enterprise v15

Tasks