General

  • Target

    815aacd478d082e6f75e00ab5d0b816051f528977451a2898d616bbc40fae959.elf

  • Size

    54KB

  • Sample

    250104-ds9dwaykhs

  • MD5

    7d60ee7a7c859f5be6439d4b20a72ac6

  • SHA1

    a1cc431a72a2fc925c624ba45144e9f73333cfa0

  • SHA256

    815aacd478d082e6f75e00ab5d0b816051f528977451a2898d616bbc40fae959

  • SHA512

    45820729cb2f52368c874140cda30b2e273f357b7742a211407aee94e7f0badc2b75c8867e63d4cf4a9306de8d5f7f62d7bcf0443abd7b6231a3aa66cd961dd2

  • SSDEEP

    768:hBcIDXUCoONGNHggX6Ig+FChj+YFFX1JiX8ZISsW1FzW9q3UELAJZka5dyY7zjgz:jDjNw2KK6kbfvv7Lef7z81t6N2

Malware Config

Extracted

Family

mirai

Botnet

LZRD

Targets

    • Target

      815aacd478d082e6f75e00ab5d0b816051f528977451a2898d616bbc40fae959.elf

    • Size

      54KB

    • MD5

      7d60ee7a7c859f5be6439d4b20a72ac6

    • SHA1

      a1cc431a72a2fc925c624ba45144e9f73333cfa0

    • SHA256

      815aacd478d082e6f75e00ab5d0b816051f528977451a2898d616bbc40fae959

    • SHA512

      45820729cb2f52368c874140cda30b2e273f357b7742a211407aee94e7f0badc2b75c8867e63d4cf4a9306de8d5f7f62d7bcf0443abd7b6231a3aa66cd961dd2

    • SSDEEP

      768:hBcIDXUCoONGNHggX6Ig+FChj+YFFX1JiX8ZISsW1FzW9q3UELAJZka5dyY7zjgz:jDjNw2KK6kbfvv7Lef7z81t6N2

    • Mirai

      Mirai is a prevalent Linux malware infecting exposed network devices.

    • Mirai family

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    • Writes file to system bin folder

MITRE ATT&CK Enterprise v15

Tasks