General

  • Target

    63629b4e266d533b9e9fae8979a355e8b27fc6038715443bec05aebe6ffdfe58.elf

  • Size

    36KB

  • Sample

    250112-c2s8kstrhk

  • MD5

    7efd2704a89ea60f8c118c9a340c17d0

  • SHA1

    7506b54fa753320018a0c63971617263df5b5674

  • SHA256

    63629b4e266d533b9e9fae8979a355e8b27fc6038715443bec05aebe6ffdfe58

  • SHA512

    d74b4476b9e8034826fb923dab6f7eab87c4567519189a00fa17faf83bbec6ee402434b8ae2c6ebd5f5006a0baa01f9ed71c62c7cdf58c163375aa107b005975

  • SSDEEP

    768:Gkjvsa/voIrLc0LQlPVvk+UQCJZakDQPkB0jj0j/HyzUx0nZd:dzHzLFMlPVMdFE44k+f2MZd

Malware Config

Extracted

Family

mirai

Botnet

LZRD

Targets

    • Target

      63629b4e266d533b9e9fae8979a355e8b27fc6038715443bec05aebe6ffdfe58.elf

    • Size

      36KB

    • MD5

      7efd2704a89ea60f8c118c9a340c17d0

    • SHA1

      7506b54fa753320018a0c63971617263df5b5674

    • SHA256

      63629b4e266d533b9e9fae8979a355e8b27fc6038715443bec05aebe6ffdfe58

    • SHA512

      d74b4476b9e8034826fb923dab6f7eab87c4567519189a00fa17faf83bbec6ee402434b8ae2c6ebd5f5006a0baa01f9ed71c62c7cdf58c163375aa107b005975

    • SSDEEP

      768:Gkjvsa/voIrLc0LQlPVvk+UQCJZakDQPkB0jj0j/HyzUx0nZd:dzHzLFMlPVMdFE44k+f2MZd

    • Mirai

      Mirai is a prevalent Linux malware infecting exposed network devices.

    • Mirai family

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    • Enumerates running processes

      Discovers information about currently running processes on the system

    • Writes file to system bin folder

MITRE ATT&CK Enterprise v15

Tasks