General

  • Target

    wind.mips.elf

  • Size

    27KB

  • Sample

    250109-x28cqazrhj

  • MD5

    0183ecffa78b2afe29ef8d4d58e96c01

  • SHA1

    ca4b7cff5f7a2aa123175f8c04bc8f70ee2444cb

  • SHA256

    529e40b98202d1b2dc78a0cb05f2e4436cbe368e1604207b618089e0e90a97e0

  • SHA512

    b2f1b8ca55cfe3d0fc41d6078687ae11d1834147dd5dfa931708bdad8ab98c4260bf75f01d3372b658b8361ebde36908ca52cb42e7ea486b21b83542107513e2

  • SSDEEP

    768:h5ZSsgv/IkCuLSmFEMWB3l+sEJgGlzDpbuR1JQN:zZSs4IkCuJeUs8VJui

Malware Config

Extracted

Family

mirai

Botnet

LZRD

Targets

    • Target

      wind.mips.elf

    • Size

      27KB

    • MD5

      0183ecffa78b2afe29ef8d4d58e96c01

    • SHA1

      ca4b7cff5f7a2aa123175f8c04bc8f70ee2444cb

    • SHA256

      529e40b98202d1b2dc78a0cb05f2e4436cbe368e1604207b618089e0e90a97e0

    • SHA512

      b2f1b8ca55cfe3d0fc41d6078687ae11d1834147dd5dfa931708bdad8ab98c4260bf75f01d3372b658b8361ebde36908ca52cb42e7ea486b21b83542107513e2

    • SSDEEP

      768:h5ZSsgv/IkCuLSmFEMWB3l+sEJgGlzDpbuR1JQN:zZSs4IkCuJeUs8VJui

    • Mirai

      Mirai is a prevalent Linux malware infecting exposed network devices.

    • Mirai family

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    • Writes file to system bin folder

MITRE ATT&CK Enterprise v15

Tasks