General

  • Target

    45.95.169.120-mips-2025-01-02T001736.elf

  • Size

    23KB

  • Sample

    250102-aq69yssqct

  • MD5

    d70a9269f912109afaeec442fb967ce6

  • SHA1

    0d89ccf6cb68f4d5b5f5a29d7f5de04984017b21

  • SHA256

    5645309e550ef9e1afad4a0da0f577a3be054aec87122317d8a0a677d47496ab

  • SHA512

    59817f04c9902c892b91469b8448431a641ea9e7fcc9fa9e87e317fdee1919d9a063f8bfc88fe90f9e9c40a3362ee2e5611f385c819e21ead39ea6148026e275

  • SSDEEP

    384:neD8ZSH2LLZUYyGZbsOiTrowSN9rnZMINlphQ/HYtuiJjCVmdzJgGlzDpH7uNj1g:neD8ZSWvZHZbs1row697qohQvg9hCViN

Malware Config

Extracted

Family

mirai

Botnet

LZRD

Targets

    • Target

      45.95.169.120-mips-2025-01-02T001736.elf

    • Size

      23KB

    • MD5

      d70a9269f912109afaeec442fb967ce6

    • SHA1

      0d89ccf6cb68f4d5b5f5a29d7f5de04984017b21

    • SHA256

      5645309e550ef9e1afad4a0da0f577a3be054aec87122317d8a0a677d47496ab

    • SHA512

      59817f04c9902c892b91469b8448431a641ea9e7fcc9fa9e87e317fdee1919d9a063f8bfc88fe90f9e9c40a3362ee2e5611f385c819e21ead39ea6148026e275

    • SSDEEP

      384:neD8ZSH2LLZUYyGZbsOiTrowSN9rnZMINlphQ/HYtuiJjCVmdzJgGlzDpH7uNj1g:neD8ZSWvZHZbs1row697qohQvg9hCViN

    • Mirai

      Mirai is a prevalent Linux malware infecting exposed network devices.

    • Mirai family

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    • Writes file to system bin folder

MITRE ATT&CK Enterprise v15

Tasks