General

  • Target

    wind.mips.elf

  • Size

    27KB

  • Sample

    250102-2tc9tssjgk

  • MD5

    31695f8e13cc48d85194f28fae5b9947

  • SHA1

    c0aeffac04584edd671c647e93cfe3732357bca4

  • SHA256

    43756b412067a771fb68c6df35ccaf2e5668de697e189cd2a6f847ed5434d20d

  • SHA512

    7c1bd7c1857a825e1ddfafc3fc67a0e9a9221ab3ed64374f7a943f91fe08e19b6c200976bae214963c7f2cd1cf3c42624e35de03d125604b1da3a3eb5c914956

  • SSDEEP

    768:T5ZSsgv/IkCuLSmFEMWB3l+s7UJgGlzDpbuR1JQx:VZSs4IkCuJeUsIVJuq

Malware Config

Extracted

Family

mirai

Botnet

LZRD

Targets

    • Target

      wind.mips.elf

    • Size

      27KB

    • MD5

      31695f8e13cc48d85194f28fae5b9947

    • SHA1

      c0aeffac04584edd671c647e93cfe3732357bca4

    • SHA256

      43756b412067a771fb68c6df35ccaf2e5668de697e189cd2a6f847ed5434d20d

    • SHA512

      7c1bd7c1857a825e1ddfafc3fc67a0e9a9221ab3ed64374f7a943f91fe08e19b6c200976bae214963c7f2cd1cf3c42624e35de03d125604b1da3a3eb5c914956

    • SSDEEP

      768:T5ZSsgv/IkCuLSmFEMWB3l+s7UJgGlzDpbuR1JQx:VZSs4IkCuJeUsIVJuq

    • Mirai

      Mirai is a prevalent Linux malware infecting exposed network devices.

    • Mirai family

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    • Enumerates running processes

      Discovers information about currently running processes on the system

    • Writes file to system bin folder

MITRE ATT&CK Enterprise v15

Tasks