General

  • Target

    3cdfe20a0f79e0d552fddb5d7a881725ac4dd8312e433a65990b55adafd2c0b3.elf

  • Size

    24KB

  • Sample

    250109-cp91katmhy

  • MD5

    4c239b88c1d333308ed42706769d14c6

  • SHA1

    3c6ebc5b02673e2b03447facebf724a1db297ce4

  • SHA256

    3cdfe20a0f79e0d552fddb5d7a881725ac4dd8312e433a65990b55adafd2c0b3

  • SHA512

    b0496f6441cb5ff7a12e62d30adaf5e117ad0f981d79aec8fcb0e716bdab7d6d8c4f5bebfe4fcf0b597a9f95d3c9a25e1159f2ae287429dc4991e18882a2282d

  • SSDEEP

    768:obrQlS07dEv0UXqUhvQE+CXQKMQKCXBpIpZqSWvR:4QlS07FUXqIYSXQKquwq5

Malware Config

Extracted

Family

mirai

Botnet

LZRD

Targets

    • Target

      3cdfe20a0f79e0d552fddb5d7a881725ac4dd8312e433a65990b55adafd2c0b3.elf

    • Size

      24KB

    • MD5

      4c239b88c1d333308ed42706769d14c6

    • SHA1

      3c6ebc5b02673e2b03447facebf724a1db297ce4

    • SHA256

      3cdfe20a0f79e0d552fddb5d7a881725ac4dd8312e433a65990b55adafd2c0b3

    • SHA512

      b0496f6441cb5ff7a12e62d30adaf5e117ad0f981d79aec8fcb0e716bdab7d6d8c4f5bebfe4fcf0b597a9f95d3c9a25e1159f2ae287429dc4991e18882a2282d

    • SSDEEP

      768:obrQlS07dEv0UXqUhvQE+CXQKMQKCXBpIpZqSWvR:4QlS07FUXqIYSXQKquwq5

    • Mirai

      Mirai is a prevalent Linux malware infecting exposed network devices.

    • Mirai family

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    • Writes file to system bin folder

MITRE ATT&CK Enterprise v15

Tasks