General

  • Target

    camp.x86.elf

  • Size

    34KB

  • Sample

    250111-2qjbnstjcw

  • MD5

    6b451baba12ac4e4f1690b2b04ab61a4

  • SHA1

    5ad2a6a0536d39ef7e57b80ac136b2c9973260ee

  • SHA256

    2db3cd41a5b0d964624cbbf35587877cd84276122cca2ef07698b88ef5790680

  • SHA512

    2fd843d8706a0853ee019460c7dd255c8ca63784369c1e5b953f9309742e770526fdd5b0cb56e7a74f0c04c3676fdf93b0ecaf36f43aa850d91629e285538f16

  • SSDEEP

    768:WzbGjwng3vdORRd5c6VobQ5g7pTjGZ+hvGhgh1TnbcuyD7UHQRjR:GdnAqKyABsibnouy8HyF

Malware Config

Extracted

Family

mirai

Botnet

LZRD

Targets

    • Target

      camp.x86.elf

    • Size

      34KB

    • MD5

      6b451baba12ac4e4f1690b2b04ab61a4

    • SHA1

      5ad2a6a0536d39ef7e57b80ac136b2c9973260ee

    • SHA256

      2db3cd41a5b0d964624cbbf35587877cd84276122cca2ef07698b88ef5790680

    • SHA512

      2fd843d8706a0853ee019460c7dd255c8ca63784369c1e5b953f9309742e770526fdd5b0cb56e7a74f0c04c3676fdf93b0ecaf36f43aa850d91629e285538f16

    • SSDEEP

      768:WzbGjwng3vdORRd5c6VobQ5g7pTjGZ+hvGhgh1TnbcuyD7UHQRjR:GdnAqKyABsibnouy8HyF

    • Mirai

      Mirai is a prevalent Linux malware infecting exposed network devices.

    • Mirai family

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    • Enumerates running processes

      Discovers information about currently running processes on the system

    • Writes file to system bin folder

MITRE ATT&CK Enterprise v15

Tasks