General

  • Target

    f82715351a684fdc0d11eb345feaacd68dd3939c3296ad733a5a1a20c3d4c6af.elf

  • Size

    20KB

  • Sample

    250105-dat68sypas

  • MD5

    378f69cf5b54c7fd11e2ccea6346f663

  • SHA1

    6016d8af1a7de96f806989e5e4bdc152718dfbd7

  • SHA256

    f82715351a684fdc0d11eb345feaacd68dd3939c3296ad733a5a1a20c3d4c6af

  • SHA512

    a34c7246fd72cce8a6444155705df597aab36bde2c545a9f131250e260dd7611c285d937851e53aeb80f3def0d345fa65bab2398c80185b9306bd3da57c22168

  • SSDEEP

    384:Mg9Lpj8s/qPui8uZxoIA57RWQjJiEVi+ZkXaqOKV14b+502F2vwA9dWuMW21bAKd:798o08kxofBE+ZkXaqGbp2F2TWul0c5w

Malware Config

Extracted

Family

mirai

Botnet

LZRD

Targets

    • Target

      f82715351a684fdc0d11eb345feaacd68dd3939c3296ad733a5a1a20c3d4c6af.elf

    • Size

      20KB

    • MD5

      378f69cf5b54c7fd11e2ccea6346f663

    • SHA1

      6016d8af1a7de96f806989e5e4bdc152718dfbd7

    • SHA256

      f82715351a684fdc0d11eb345feaacd68dd3939c3296ad733a5a1a20c3d4c6af

    • SHA512

      a34c7246fd72cce8a6444155705df597aab36bde2c545a9f131250e260dd7611c285d937851e53aeb80f3def0d345fa65bab2398c80185b9306bd3da57c22168

    • SSDEEP

      384:Mg9Lpj8s/qPui8uZxoIA57RWQjJiEVi+ZkXaqOKV14b+502F2vwA9dWuMW21bAKd:798o08kxofBE+ZkXaqGbp2F2TWul0c5w

    • Mirai

      Mirai is a prevalent Linux malware infecting exposed network devices.

    • Mirai family

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    • Enumerates running processes

      Discovers information about currently running processes on the system

    • Writes file to system bin folder

MITRE ATT&CK Enterprise v15

Tasks