General

  • Target

    80e9d07dd1222b4908748d20dc9864d316a194b62bb541b130b4f054b8b504df.elf

  • Size

    36KB

  • Sample

    250112-c9kw6svman

  • MD5

    dbd52cab3f34236c5ea317dbef35c611

  • SHA1

    21a1b60b973713a1bd6773ce307711eb67b93775

  • SHA256

    80e9d07dd1222b4908748d20dc9864d316a194b62bb541b130b4f054b8b504df

  • SHA512

    c3f76b9d9adc8791eea2309fa907b709bc35d8a0080b6d8ad3930bab504ec949f275531c0d95988066a40c7fc03150dc862f01e490bbb59f897a932bcafce0b9

  • SSDEEP

    768:G+4qtvWUAASjjLMGz7/tjBQd4Mt8nEPH3Ggu6APvPWx01:19tvWrASjjL17/9BODtoPgu62WY

Malware Config

Extracted

Family

mirai

Botnet

LZRD

Targets

    • Target

      80e9d07dd1222b4908748d20dc9864d316a194b62bb541b130b4f054b8b504df.elf

    • Size

      36KB

    • MD5

      dbd52cab3f34236c5ea317dbef35c611

    • SHA1

      21a1b60b973713a1bd6773ce307711eb67b93775

    • SHA256

      80e9d07dd1222b4908748d20dc9864d316a194b62bb541b130b4f054b8b504df

    • SHA512

      c3f76b9d9adc8791eea2309fa907b709bc35d8a0080b6d8ad3930bab504ec949f275531c0d95988066a40c7fc03150dc862f01e490bbb59f897a932bcafce0b9

    • SSDEEP

      768:G+4qtvWUAASjjLMGz7/tjBQd4Mt8nEPH3Ggu6APvPWx01:19tvWrASjjL17/9BODtoPgu62WY

    • Mirai

      Mirai is a prevalent Linux malware infecting exposed network devices.

    • Mirai family

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    • Enumerates running processes

      Discovers information about currently running processes on the system

    • Writes file to system bin folder

MITRE ATT&CK Enterprise v15

Tasks