General

  • Target

    602191e10ba1c49583a045d17e08f1a4.bin

  • Size

    42KB

  • Sample

    250105-bqbzgsylfp

  • MD5

    548e7240223fb0b6b77d37eb95f6b143

  • SHA1

    562ba1f261567208e20439f3c27cea90aa0bc2fd

  • SHA256

    5a857bb3401b84a4e6eb41331d81962c7b07ab82abcd26f64dbb6ee43c535444

  • SHA512

    ab3c09a13b7981d664754d29624ab83b25c795f3c1b247b020cbd80a204f7fbe70047045925ac136e460fa8d797c55678ba5d84eb0740941ea99c0bbdff9a316

  • SSDEEP

    768:UPbLLtc/RD0cS3r/dTJEoLOlrK/uyk8FntUJ5c7hJPiGmF1o:UPJc/90pZJ8rdyZc2lcT1o

Malware Config

Extracted

Family

mirai

Botnet

LZRD

Targets

    • Target

      1807c743b59f7ca6ab655005a5cda2d2618b8b16392dc7104603ccb3a661257d.elf

    • Size

      43KB

    • MD5

      602191e10ba1c49583a045d17e08f1a4

    • SHA1

      4e6bca6853b6d328f9c9528258ba0374f6a67d7d

    • SHA256

      1807c743b59f7ca6ab655005a5cda2d2618b8b16392dc7104603ccb3a661257d

    • SHA512

      4a75e4a7523e73d003f752052d5dbd962cbcb4fbff562457d9ffdf570ef589c6c8f4362b3e72b097a6e743bd97e85d8bdb534e6840576ba16a6fd4b7974a81ae

    • SSDEEP

      768:3/ZyKJoofyfTtMLfclRAAO+jVbumZnLM3XgcTaWS5HOFcwGw9q3UEL+:hbjjOAgfnLGRMOC5L+

    • Mirai

      Mirai is a prevalent Linux malware infecting exposed network devices.

    • Mirai family

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    • Enumerates running processes

      Discovers information about currently running processes on the system

    • Writes file to system bin folder

MITRE ATT&CK Enterprise v15

Tasks