General

  • Target

    5424315fe64b305382a10ce93ed223b5.bin

  • Size

    21KB

  • Sample

    250111-bgqraawmhw

  • MD5

    fbb71ab1fd878a5059ccdaf51e2634e7

  • SHA1

    82f1dd72eb39d1aef74322d524733ff26def14ac

  • SHA256

    4a9ec1b9add84aa9b64400ebc15e69ee1990c6c2d0da060086b42fdd787bb47b

  • SHA512

    97e5a0ffc05a8cb2cdba7602372c4f0d0c27c506392e254231675a58e937470f781cbe39559bcd360e569118b6b0ccda2825da5b77b872ceb186ee4f2d6caf6e

  • SSDEEP

    384:nXbNs+p0qxXb5d8jQ0UddZrnusstmWZUFZD6HfmQJg7JV4nAKHzmEGHjejU5W:nXbN/HxXbeIbrnuxwWwZDmfTg7JGNHKS

Malware Config

Extracted

Family

mirai

Botnet

LZRD

Targets

    • Target

      7519ad77ca24c0c44cfeb3677b8c6a51d540a114c7f4a50c8fdda00e0d1eafea.elf

    • Size

      21KB

    • MD5

      5424315fe64b305382a10ce93ed223b5

    • SHA1

      d8e57e67aa337c3bfbfcb4780863e09dd7c0ff40

    • SHA256

      7519ad77ca24c0c44cfeb3677b8c6a51d540a114c7f4a50c8fdda00e0d1eafea

    • SHA512

      4af0a35b12edd25207c2b7a7c827b140a5c54ae9866db34252bb63cdd05f13107555771a595f72ce4a2e7d6cd8816595dc5dc1e9fcd9f759a117fa3a432d9846

    • SSDEEP

      384:vvtIoZxrSniaXs+qx+bwqPX+VOcFd5fHq52lxjJ3hymdGUop5hU+:vvQn4j+ZO5fKAlxRs3Uozy+

    • Mirai

      Mirai is a prevalent Linux malware infecting exposed network devices.

    • Mirai family

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    • Enumerates running processes

      Discovers information about currently running processes on the system

    • Writes file to system bin folder

MITRE ATT&CK Enterprise v15

Tasks