General

  • Target

    4a63c99fdd0ee8a2d1883fc0fa5f63e317f4bfd1f806f96142f6a11d45f769cd.elf

  • Size

    20KB

  • Sample

    250109-crmcaawpek

  • MD5

    2ae103aa2f7794c2b55d622566657b5d

  • SHA1

    dd8f70c49757124a5a6bb7e72c85755e0ab65bc5

  • SHA256

    4a63c99fdd0ee8a2d1883fc0fa5f63e317f4bfd1f806f96142f6a11d45f769cd

  • SHA512

    ab4d0b24b220dfca7f9ce1b6a298972e3607b66b0be16c935543dadd45ec86a637396a34b9ba0b5b3030d7175cc19165baeabd5afa66ace24e4367f0c6871a5c

  • SSDEEP

    384:Mg9Lpj8s/qPui8uZxoIA57RWQjJiEVi+ZkXadmTb+502F2vwA9dWuMW21bAK1oT9:798o08kxofBE+ZkXaITbp2F2TWul0c5Z

Malware Config

Extracted

Family

mirai

Botnet

LZRD

Targets

    • Target

      4a63c99fdd0ee8a2d1883fc0fa5f63e317f4bfd1f806f96142f6a11d45f769cd.elf

    • Size

      20KB

    • MD5

      2ae103aa2f7794c2b55d622566657b5d

    • SHA1

      dd8f70c49757124a5a6bb7e72c85755e0ab65bc5

    • SHA256

      4a63c99fdd0ee8a2d1883fc0fa5f63e317f4bfd1f806f96142f6a11d45f769cd

    • SHA512

      ab4d0b24b220dfca7f9ce1b6a298972e3607b66b0be16c935543dadd45ec86a637396a34b9ba0b5b3030d7175cc19165baeabd5afa66ace24e4367f0c6871a5c

    • SSDEEP

      384:Mg9Lpj8s/qPui8uZxoIA57RWQjJiEVi+ZkXadmTb+502F2vwA9dWuMW21bAK1oT9:798o08kxofBE+ZkXaITbp2F2TWul0c5Z

    • Mirai

      Mirai is a prevalent Linux malware infecting exposed network devices.

    • Mirai family

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    • Enumerates running processes

      Discovers information about currently running processes on the system

    • Writes file to system bin folder

MITRE ATT&CK Enterprise v15

Tasks