General

  • Target

    x86.elf

  • Size

    20KB

  • Sample

    250102-at2tmssrgs

  • MD5

    2696d2b99111e232d78a0c9678a3e154

  • SHA1

    19933c0b1d0b81348c862aaedbda11087b87c874

  • SHA256

    3cd86a5cc82976251f617c7ca32d6d0fa5e757a4489f0e60dd1cccff28f8b379

  • SHA512

    67a9bd12fe8499665fe2a4ae772f4685744a00bfec1452577236f626ddbd8087956609673a78b514a6e438538f815242c98dff15b83c1b8f4302130ea818b8bb

  • SSDEEP

    384:Mg4Lpj8s/qPui8uZxoIA57RWQjJiEVi+ZkXadmTb+502F2vwA9dWuMW21bAK1oTa:M98o08kxofBE+ZkXaITbp2F2TWul0c5m

Malware Config

Extracted

Family

mirai

Botnet

LZRD

Targets

    • Target

      x86.elf

    • Size

      20KB

    • MD5

      2696d2b99111e232d78a0c9678a3e154

    • SHA1

      19933c0b1d0b81348c862aaedbda11087b87c874

    • SHA256

      3cd86a5cc82976251f617c7ca32d6d0fa5e757a4489f0e60dd1cccff28f8b379

    • SHA512

      67a9bd12fe8499665fe2a4ae772f4685744a00bfec1452577236f626ddbd8087956609673a78b514a6e438538f815242c98dff15b83c1b8f4302130ea818b8bb

    • SSDEEP

      384:Mg4Lpj8s/qPui8uZxoIA57RWQjJiEVi+ZkXadmTb+502F2vwA9dWuMW21bAK1oTa:M98o08kxofBE+ZkXaITbp2F2TWul0c5m

    • Mirai

      Mirai is a prevalent Linux malware infecting exposed network devices.

    • Mirai family

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    • Enumerates running processes

      Discovers information about currently running processes on the system

    • Writes file to system bin folder

MITRE ATT&CK Enterprise v15

Tasks