General

  • Target

    fd10a50ccf70d368c85c2423b474aff7d6532453261e30b08770587e1bea8fdc.elf

  • Size

    38KB

  • Sample

    250106-dxz11axkdr

  • MD5

    1e8570a760413231dba2468cd964b4c8

  • SHA1

    ed5b6c4789b297b469a67ab06fae2515d10337cc

  • SHA256

    fd10a50ccf70d368c85c2423b474aff7d6532453261e30b08770587e1bea8fdc

  • SHA512

    f2cd2daed1fc0ac22cfd9ed9e238278d2a00166fe2dcc61d183467d71e3cfe3c1ba376de44dd5b22fccad704def523c904fae306a0b6906941c050e65c167768

  • SSDEEP

    768:dg2h8tG9BjEdBO240aMS3ZisCoz7BKv/J4kbs3UozUl:qFSea2opKHJ4jzUl

Malware Config

Extracted

Family

mirai

Botnet

LZRD

Targets

    • Target

      fd10a50ccf70d368c85c2423b474aff7d6532453261e30b08770587e1bea8fdc.elf

    • Size

      38KB

    • MD5

      1e8570a760413231dba2468cd964b4c8

    • SHA1

      ed5b6c4789b297b469a67ab06fae2515d10337cc

    • SHA256

      fd10a50ccf70d368c85c2423b474aff7d6532453261e30b08770587e1bea8fdc

    • SHA512

      f2cd2daed1fc0ac22cfd9ed9e238278d2a00166fe2dcc61d183467d71e3cfe3c1ba376de44dd5b22fccad704def523c904fae306a0b6906941c050e65c167768

    • SSDEEP

      768:dg2h8tG9BjEdBO240aMS3ZisCoz7BKv/J4kbs3UozUl:qFSea2opKHJ4jzUl

    • Mirai

      Mirai is a prevalent Linux malware infecting exposed network devices.

    • Mirai family

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    • Enumerates running processes

      Discovers information about currently running processes on the system

    • Writes file to system bin folder

MITRE ATT&CK Enterprise v15

Tasks