General

  • Target

    f9408ca8aa9716bd4561bf719a6a8f80b88a26cc5379e994f397d3f9b9e8b2de.elf

  • Size

    20KB

  • Sample

    250110-ev2mgs1rdw

  • MD5

    29ef0763121cbdb75d7a0f196afdd8aa

  • SHA1

    22bf2948a5bef3356b4a246012d8bacea8c758b2

  • SHA256

    f9408ca8aa9716bd4561bf719a6a8f80b88a26cc5379e994f397d3f9b9e8b2de

  • SHA512

    76960dcddf809785e59b7ce569805d8283122e4b0c64b306e207de93425a6c16b847ead3e67b1d2580058cbb74451cd4580e075a121683b8a1f53307c0d000a1

  • SSDEEP

    384:Mg4Lpj8s/qPui8uZxoIA57RWQjJiEVi+ZkXadmTb+502F2vwA9dWuMW21bAK1oTw:M98o08kxofBE+ZkXaITbp2F2TWul0c5k

Malware Config

Extracted

Family

mirai

Botnet

LZRD

Targets

    • Target

      f9408ca8aa9716bd4561bf719a6a8f80b88a26cc5379e994f397d3f9b9e8b2de.elf

    • Size

      20KB

    • MD5

      29ef0763121cbdb75d7a0f196afdd8aa

    • SHA1

      22bf2948a5bef3356b4a246012d8bacea8c758b2

    • SHA256

      f9408ca8aa9716bd4561bf719a6a8f80b88a26cc5379e994f397d3f9b9e8b2de

    • SHA512

      76960dcddf809785e59b7ce569805d8283122e4b0c64b306e207de93425a6c16b847ead3e67b1d2580058cbb74451cd4580e075a121683b8a1f53307c0d000a1

    • SSDEEP

      384:Mg4Lpj8s/qPui8uZxoIA57RWQjJiEVi+ZkXadmTb+502F2vwA9dWuMW21bAK1oTw:M98o08kxofBE+ZkXaITbp2F2TWul0c5k

    • Mirai

      Mirai is a prevalent Linux malware infecting exposed network devices.

    • Mirai family

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    • Enumerates running processes

      Discovers information about currently running processes on the system

    • Writes file to system bin folder

MITRE ATT&CK Enterprise v15

Tasks