General

  • Target

    2d7408b6f293dad0fe7d485d1434c91059f37ebd1cbc1d696ef2e79156d36655.elf

  • Size

    45KB

  • Sample

    250105-ckjb2sxpdw

  • MD5

    bc01fb4b319cbeebf0de81aafc038d20

  • SHA1

    7193ae7e285cb75b925feb709ca8c5701bffda1c

  • SHA256

    2d7408b6f293dad0fe7d485d1434c91059f37ebd1cbc1d696ef2e79156d36655

  • SHA512

    047ca84596a6c7aac380318b0fbd198bdc035097876c2fe3d94b233b90168aca2a1d07e83d173f8e020cf302928b3bd14748fd9fa3526461fe6db8bbca99a1bf

  • SSDEEP

    768:D/TYCoIxdEk+AxoTZAZHFeq8b3Zp9q3UELbUXfi6nVMQHI4vcGpvx:DECFd+A6YHAxZcLRQZx

Malware Config

Extracted

Family

mirai

Botnet

LZRD

Targets

    • Target

      2d7408b6f293dad0fe7d485d1434c91059f37ebd1cbc1d696ef2e79156d36655.elf

    • Size

      45KB

    • MD5

      bc01fb4b319cbeebf0de81aafc038d20

    • SHA1

      7193ae7e285cb75b925feb709ca8c5701bffda1c

    • SHA256

      2d7408b6f293dad0fe7d485d1434c91059f37ebd1cbc1d696ef2e79156d36655

    • SHA512

      047ca84596a6c7aac380318b0fbd198bdc035097876c2fe3d94b233b90168aca2a1d07e83d173f8e020cf302928b3bd14748fd9fa3526461fe6db8bbca99a1bf

    • SSDEEP

      768:D/TYCoIxdEk+AxoTZAZHFeq8b3Zp9q3UELbUXfi6nVMQHI4vcGpvx:DECFd+A6YHAxZcLRQZx

    • Mirai

      Mirai is a prevalent Linux malware infecting exposed network devices.

    • Mirai family

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    • Writes file to system bin folder

MITRE ATT&CK Enterprise v15

Tasks