General

  • Target

    3850a6ed3b8397a787989e782dd8f96d.bin

  • Size

    59KB

  • Sample

    250105-bk5plswmds

  • MD5

    32cb639e77d7a92f0784965caf7a7934

  • SHA1

    2713e84aec55c8b1baa3eb9f51a3d42d59f219be

  • SHA256

    51dfc223f33e80dfd8a8e5211f2512c529cee2ba435f420b89d9092b73b7117b

  • SHA512

    963a8d16d30df09aa078a25ecfb8505a4c9064304cf96aebdf0e773283a2cc14434787117d97a4adc2685c63c39c6b4db16a8f6c6f4f04e7ceec8dde84a5dd18

  • SSDEEP

    1536:Wk/RquO6YfdkujWBERNpdJPVncmuDQK/kAxv+0vVxuP8:WMZOr6ujW6RNpdJdnoEKZx2oeP8

Malware Config

Extracted

Family

mirai

Botnet

LZRD

Targets

    • Target

      fbf8b8524b49dbcb4369bc7f84cb321a01fbf956c3c4ea7475e7fcb813ba13cf.elf

    • Size

      60KB

    • MD5

      3850a6ed3b8397a787989e782dd8f96d

    • SHA1

      1b67ffbaecdc01a7a7305cbc19139bf230496506

    • SHA256

      fbf8b8524b49dbcb4369bc7f84cb321a01fbf956c3c4ea7475e7fcb813ba13cf

    • SHA512

      545b12f6ebfa4fb4b27658c497cf7e3f837935aec0de44b7e0466163994868c5e1df758bcf6e8c937d79b28d11795d6eec536a39c2a7c01c13a2f7efb4e39c8d

    • SSDEEP

      1536:Y7XduYshWhq/HIEy6Og3Nwz9hAyxP4fzLSM5Tfv83KJGTb6R4T:qdpssMPR9w4yxP4fzLXTX83K0Tb6Rg

    • Mirai

      Mirai is a prevalent Linux malware infecting exposed network devices.

    • Mirai family

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    • Enumerates running processes

      Discovers information about currently running processes on the system

    • Writes file to system bin folder

MITRE ATT&CK Enterprise v15

Tasks