General

  • Target

    1807c743b59f7ca6ab655005a5cda2d2618b8b16392dc7104603ccb3a661257d.elf

  • Size

    43KB

  • Sample

    250104-chq9wavrax

  • MD5

    602191e10ba1c49583a045d17e08f1a4

  • SHA1

    4e6bca6853b6d328f9c9528258ba0374f6a67d7d

  • SHA256

    1807c743b59f7ca6ab655005a5cda2d2618b8b16392dc7104603ccb3a661257d

  • SHA512

    4a75e4a7523e73d003f752052d5dbd962cbcb4fbff562457d9ffdf570ef589c6c8f4362b3e72b097a6e743bd97e85d8bdb534e6840576ba16a6fd4b7974a81ae

  • SSDEEP

    768:3/ZyKJoofyfTtMLfclRAAO+jVbumZnLM3XgcTaWS5HOFcwGw9q3UEL+:hbjjOAgfnLGRMOC5L+

Malware Config

Extracted

Family

mirai

Botnet

LZRD

Targets

    • Target

      1807c743b59f7ca6ab655005a5cda2d2618b8b16392dc7104603ccb3a661257d.elf

    • Size

      43KB

    • MD5

      602191e10ba1c49583a045d17e08f1a4

    • SHA1

      4e6bca6853b6d328f9c9528258ba0374f6a67d7d

    • SHA256

      1807c743b59f7ca6ab655005a5cda2d2618b8b16392dc7104603ccb3a661257d

    • SHA512

      4a75e4a7523e73d003f752052d5dbd962cbcb4fbff562457d9ffdf570ef589c6c8f4362b3e72b097a6e743bd97e85d8bdb534e6840576ba16a6fd4b7974a81ae

    • SSDEEP

      768:3/ZyKJoofyfTtMLfclRAAO+jVbumZnLM3XgcTaWS5HOFcwGw9q3UEL+:hbjjOAgfnLGRMOC5L+

    • Mirai

      Mirai is a prevalent Linux malware infecting exposed network devices.

    • Mirai family

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    • Enumerates running processes

      Discovers information about currently running processes on the system

    • Writes file to system bin folder

MITRE ATT&CK Enterprise v15

Tasks