General

  • Target

    3fd16405255115d59cdb644142235ec6f833f5be4d7995226aa6c6ff4ae44ee8.elf

  • Size

    60KB

  • Sample

    250111-dh3tcatkbr

  • MD5

    3ae5623940405507c0e9e8e239b33370

  • SHA1

    6ae680aa0add4922395e9aab3bae31b6064cf846

  • SHA256

    3fd16405255115d59cdb644142235ec6f833f5be4d7995226aa6c6ff4ae44ee8

  • SHA512

    fb3aaa662dc72efe53052e0fee62ec6465e3dec9e6b6ad6330850cda20f1bb48740a21a4702b6bcd0dcfb230f5e9c753836d43aa7beb66cbc1a3480a2841ab0e

  • SSDEEP

    1536:yVQINYf9A391ZE+/CV97jKYGv3fLTM5Tfv83KJ2crl2EWJ:yVRYf92tabK5LgTX83KHl2EWJ

Malware Config

Extracted

Family

mirai

Botnet

LZRD

Targets

    • Target

      3fd16405255115d59cdb644142235ec6f833f5be4d7995226aa6c6ff4ae44ee8.elf

    • Size

      60KB

    • MD5

      3ae5623940405507c0e9e8e239b33370

    • SHA1

      6ae680aa0add4922395e9aab3bae31b6064cf846

    • SHA256

      3fd16405255115d59cdb644142235ec6f833f5be4d7995226aa6c6ff4ae44ee8

    • SHA512

      fb3aaa662dc72efe53052e0fee62ec6465e3dec9e6b6ad6330850cda20f1bb48740a21a4702b6bcd0dcfb230f5e9c753836d43aa7beb66cbc1a3480a2841ab0e

    • SSDEEP

      1536:yVQINYf9A391ZE+/CV97jKYGv3fLTM5Tfv83KJ2crl2EWJ:yVRYf92tabK5LgTX83KHl2EWJ

    • Mirai

      Mirai is a prevalent Linux malware infecting exposed network devices.

    • Mirai family

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    • Enumerates running processes

      Discovers information about currently running processes on the system

    • Writes file to system bin folder

MITRE ATT&CK Enterprise v15

Tasks