General

  • Target

    45f47c10e0d27c00ac46899fda99f1f3.bin

  • Size

    36KB

  • Sample

    250105-blgn6swmev

  • MD5

    f13da39b355490e4c8f8b55b639253f1

  • SHA1

    4c86f1c456c52bf68e9384797e885e7e494fcc69

  • SHA256

    deacafc4e7d2bd5c20f4fa8f12b71a829ae6b3b35bcab22c0bc586749a31ab22

  • SHA512

    e54ed511174df105346fd7205d75f6f5feb2cf981e2598842a413b3660e2b5233323e928177bd19fbb6aaff1003d9458b70aa0f9dd3ccc1610f892b2b28042ca

  • SSDEEP

    768:NbHf0/eLYuWuWDABfS5xnawtvMPYtjjLVSzcwd4puSnH4iXyHdylxP/:x6gYrurevMw93VsGp5oE7P/

Malware Config

Extracted

Family

mirai

Botnet

LZRD

Targets

    • Target

      39e7164325dd360f891bf0f9f8e7bebb1c90eb071bb5e98d621793d416647482.elf

    • Size

      37KB

    • MD5

      45f47c10e0d27c00ac46899fda99f1f3

    • SHA1

      f68e23694abb254e1a5c7b169547516baead730b

    • SHA256

      39e7164325dd360f891bf0f9f8e7bebb1c90eb071bb5e98d621793d416647482

    • SHA512

      dde1d3c1a50cc5647bb2003309da0d1211bb2261de1655ae21bc7782bf36648b08793667ab5b91992f40829f019ee3cda4de48caf5245960b162c7f5f6b3bc6e

    • SSDEEP

      768:MxaYe0syQ8ETE9v4uNc5B0G3kSKs+NNt1nbcuyD7UrQRjU:BYgBboHcfNUSKs+bnouy8ryA

    • Mirai

      Mirai is a prevalent Linux malware infecting exposed network devices.

    • Mirai family

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    • Enumerates running processes

      Discovers information about currently running processes on the system

    • Writes file to system bin folder

MITRE ATT&CK Enterprise v15

Tasks