General

  • Target

    89c00dd16ffc08e8abe400ca834200540c422cb45af8a14a8bdc3b50b0da2803.elf

  • Size

    28KB

  • Sample

    250110-c7rlya1qeq

  • MD5

    0d39982b3aa657376d573e11cdd40ff9

  • SHA1

    a96d5595a0c3a16cc135a7de6fa1d0dca6b53963

  • SHA256

    89c00dd16ffc08e8abe400ca834200540c422cb45af8a14a8bdc3b50b0da2803

  • SHA512

    4f78ee3aa16dffcfc296fe38e1f2c59ad6aa037897f565d745c088fddcef3eef47c9ef3cf166275691eb56874c0b8e621e0a40365df4250f86966e9d7374d191

  • SSDEEP

    384:XmjOb/7xg3HAp0nwcOESKAhKDn459qfUscwA/75xPuC6DGCabvT95am2xzjnRWGw:YObTx2HrZOKAhn4UswxPu3GdZ5YRlWZ

Malware Config

Extracted

Family

mirai

Botnet

LZRD

Targets

    • Target

      89c00dd16ffc08e8abe400ca834200540c422cb45af8a14a8bdc3b50b0da2803.elf

    • Size

      28KB

    • MD5

      0d39982b3aa657376d573e11cdd40ff9

    • SHA1

      a96d5595a0c3a16cc135a7de6fa1d0dca6b53963

    • SHA256

      89c00dd16ffc08e8abe400ca834200540c422cb45af8a14a8bdc3b50b0da2803

    • SHA512

      4f78ee3aa16dffcfc296fe38e1f2c59ad6aa037897f565d745c088fddcef3eef47c9ef3cf166275691eb56874c0b8e621e0a40365df4250f86966e9d7374d191

    • SSDEEP

      384:XmjOb/7xg3HAp0nwcOESKAhKDn459qfUscwA/75xPuC6DGCabvT95am2xzjnRWGw:YObTx2HrZOKAhn4UswxPu3GdZ5YRlWZ

    • Mirai

      Mirai is a prevalent Linux malware infecting exposed network devices.

    • Mirai family

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    • Writes file to system bin folder

MITRE ATT&CK Enterprise v15

Tasks