General

  • Target

    438aa73c7b25359f8f7e32e8946f86695d2968348d3070b6cf8e6fde3fd45268.elf

  • Size

    27KB

  • Sample

    250110-cszzrsymes

  • MD5

    71200d52dd36826b19f6d6c298130a3f

  • SHA1

    314dfad61264473be7368c45286d9ae76358d4cc

  • SHA256

    438aa73c7b25359f8f7e32e8946f86695d2968348d3070b6cf8e6fde3fd45268

  • SHA512

    41628f383208e0a9f3429a57c77b142e400729f85738f7c57d4188da60dda146f71e4c227d2fecef4f64d55770535ff610352f8b690e8d3b0885369b6bb2d527

  • SSDEEP

    768:T5ZSsgv/IkCuLSmFEMWB3l+sEyVJgGlzDpbuR1JQt:VZSs4IkCuJeUslVJuy

Malware Config

Extracted

Family

mirai

Botnet

LZRD

Targets

    • Target

      438aa73c7b25359f8f7e32e8946f86695d2968348d3070b6cf8e6fde3fd45268.elf

    • Size

      27KB

    • MD5

      71200d52dd36826b19f6d6c298130a3f

    • SHA1

      314dfad61264473be7368c45286d9ae76358d4cc

    • SHA256

      438aa73c7b25359f8f7e32e8946f86695d2968348d3070b6cf8e6fde3fd45268

    • SHA512

      41628f383208e0a9f3429a57c77b142e400729f85738f7c57d4188da60dda146f71e4c227d2fecef4f64d55770535ff610352f8b690e8d3b0885369b6bb2d527

    • SSDEEP

      768:T5ZSsgv/IkCuLSmFEMWB3l+sEyVJgGlzDpbuR1JQt:VZSs4IkCuJeUslVJuy

    • Mirai

      Mirai is a prevalent Linux malware infecting exposed network devices.

    • Mirai family

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    • Writes file to system bin folder

MITRE ATT&CK Enterprise v15

Tasks