General

  • Target

    47de8e9756a7e1b5b93cded6eb73b7b8c1b17063cc2f674ae4204d0b477b575f.elf

  • Size

    27KB

  • Sample

    250104-dg3ryszngk

  • MD5

    e19d2dcd20dc35557131431c9d9f498a

  • SHA1

    d8e9551efe81c1735afca881ada7d5d695097497

  • SHA256

    47de8e9756a7e1b5b93cded6eb73b7b8c1b17063cc2f674ae4204d0b477b575f

  • SHA512

    23840154f54dce4abd055589026f25d5068677cd27fc3fa74670a0c9966c01d69b656c747a28c734c4b81e067db44dd68d4ca5eb69f818eff67f8542e1e77c78

  • SSDEEP

    384:iMqPElEZlFa5ldSV21IbG8zg7cuDGA1xCuZR1c/ECCAx/8RoCMKbRWGVCz0NvNj:316ZDClFMGrGA+uDnCCAx0NzW0

Malware Config

Extracted

Family

mirai

Botnet

LZRD

Targets

    • Target

      47de8e9756a7e1b5b93cded6eb73b7b8c1b17063cc2f674ae4204d0b477b575f.elf

    • Size

      27KB

    • MD5

      e19d2dcd20dc35557131431c9d9f498a

    • SHA1

      d8e9551efe81c1735afca881ada7d5d695097497

    • SHA256

      47de8e9756a7e1b5b93cded6eb73b7b8c1b17063cc2f674ae4204d0b477b575f

    • SHA512

      23840154f54dce4abd055589026f25d5068677cd27fc3fa74670a0c9966c01d69b656c747a28c734c4b81e067db44dd68d4ca5eb69f818eff67f8542e1e77c78

    • SSDEEP

      384:iMqPElEZlFa5ldSV21IbG8zg7cuDGA1xCuZR1c/ECCAx/8RoCMKbRWGVCz0NvNj:316ZDClFMGrGA+uDnCCAx0NzW0

    • Mirai

      Mirai is a prevalent Linux malware infecting exposed network devices.

    • Mirai family

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    • Writes file to system bin folder

MITRE ATT&CK Enterprise v15

Tasks