General

  • Target

    382edb367d457557fbc1c4593bfe393f.bin

  • Size

    37KB

  • Sample

    250105-bk29gsykcm

  • MD5

    d5c8e18568579b345b9e5c76d9da41e0

  • SHA1

    0c8f64817d8b129e18627302cfc49dc70679a9aa

  • SHA256

    df97fc3be7d4afdfe98aca73ef286ca82809b0840dbbdb2e929982a52787f3e1

  • SHA512

    c1f63ee7af907ea0fed8a2be657415093b9f5bc935934b0bed872a139ed7dd2857a0996a343c95bb4bdeb92f05777d09cb00c9a65ac49503c20eac11b2d301ff

  • SSDEEP

    768:i+F4uzIodOdZszHcwLj07y10VYDiWKdwNtvV+7E6cUU5Ff:L4u8oAdAGuWFhgV+g/v

Malware Config

Extracted

Family

mirai

Botnet

LZRD

Targets

    • Target

      88652bbf95c9ef10f2a72c92d46096bd4d8605e77fbbffadf9d5dfc46e9a58e2.elf

    • Size

      38KB

    • MD5

      382edb367d457557fbc1c4593bfe393f

    • SHA1

      7639eae0fb8d2523155572e721c9e003f9c83fb3

    • SHA256

      88652bbf95c9ef10f2a72c92d46096bd4d8605e77fbbffadf9d5dfc46e9a58e2

    • SHA512

      68f2998b3bf425fda1f24c8f6c7fb03be35702abc2e27bfbaa7e67be6d7f81e81ebb00d616d1bf6d43f346b5e92b9682a11ece99b040269707a24d9ab8028e9f

    • SSDEEP

      768:dBKNWbxNdoZd64sVhUQX9bS9CL+v7TqvnGQre6warL5/+qEn92a2gs3UozOx:rQiDdY4hUQNb/yv72vnGFpaH5/q0bzOx

    • Mirai

      Mirai is a prevalent Linux malware infecting exposed network devices.

    • Mirai family

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    • Enumerates running processes

      Discovers information about currently running processes on the system

    • Writes file to system bin folder

MITRE ATT&CK Enterprise v15

Tasks