General

  • Target

    db3f46206422e7674e1e5170bcc3b3ad77082f263e98b41e565373dc33b99409.elf

  • Size

    36KB

  • Sample

    250111-f7a6qswpbx

  • MD5

    c15c24c9f48a3ca485dfc1f18e2a302d

  • SHA1

    29da71a082996d08ba01d76e1fbe5b4a49706a9e

  • SHA256

    db3f46206422e7674e1e5170bcc3b3ad77082f263e98b41e565373dc33b99409

  • SHA512

    c298a220fb3a9f447f025ef9df81d6e84ff39bf31df68079ef462d92c9ddb1655e2c48fd2dc5f2cfbbee0727b3c6ba1f050dbb8cc4f7c9bdb318989fde311c4f

  • SSDEEP

    768:u+4qtvWUAASqjTDQLm7gR0/KAS8gMhM7TaLQXd1yDpwWx0n:t9tvWrASqjQCU+TlITaELyVS

Malware Config

Extracted

Family

mirai

Botnet

LZRD

Targets

    • Target

      db3f46206422e7674e1e5170bcc3b3ad77082f263e98b41e565373dc33b99409.elf

    • Size

      36KB

    • MD5

      c15c24c9f48a3ca485dfc1f18e2a302d

    • SHA1

      29da71a082996d08ba01d76e1fbe5b4a49706a9e

    • SHA256

      db3f46206422e7674e1e5170bcc3b3ad77082f263e98b41e565373dc33b99409

    • SHA512

      c298a220fb3a9f447f025ef9df81d6e84ff39bf31df68079ef462d92c9ddb1655e2c48fd2dc5f2cfbbee0727b3c6ba1f050dbb8cc4f7c9bdb318989fde311c4f

    • SSDEEP

      768:u+4qtvWUAASqjTDQLm7gR0/KAS8gMhM7TaLQXd1yDpwWx0n:t9tvWrASqjQCU+TlITaELyVS

    • Mirai

      Mirai is a prevalent Linux malware infecting exposed network devices.

    • Mirai family

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    • Enumerates running processes

      Discovers information about currently running processes on the system

    • Writes file to system bin folder

MITRE ATT&CK Enterprise v15

Tasks