General

  • Target

    fc89595265a82619368959695fe53d08506a64aac5eb085a9b56e52e007307d9.elf

  • Size

    37KB

  • Sample

    250112-d9ektsxkfn

  • MD5

    c04d84936944d603d51ca301cbaa4ba1

  • SHA1

    797aaf632fd4b6bff9d80671a7354ca2f3e3b3dd

  • SHA256

    fc89595265a82619368959695fe53d08506a64aac5eb085a9b56e52e007307d9

  • SHA512

    bf5a7317d894499b74768a5af33f3b7819ce012af4be0cd02d82b100d6d53bfce694817f9e693a9ece7515d8e09a97e7e39c3a9d4b00e616b6510a07ac39d653

  • SSDEEP

    768:hyI187beFSc+RX4qCw7kwGDGRfHBhdWIhoqJgGlzDpbuR1Jk:hyf7beMbIqCw7jcGX6EoOVJui

Malware Config

Extracted

Family

mirai

Botnet

LZRD

Targets

    • Target

      fc89595265a82619368959695fe53d08506a64aac5eb085a9b56e52e007307d9.elf

    • Size

      37KB

    • MD5

      c04d84936944d603d51ca301cbaa4ba1

    • SHA1

      797aaf632fd4b6bff9d80671a7354ca2f3e3b3dd

    • SHA256

      fc89595265a82619368959695fe53d08506a64aac5eb085a9b56e52e007307d9

    • SHA512

      bf5a7317d894499b74768a5af33f3b7819ce012af4be0cd02d82b100d6d53bfce694817f9e693a9ece7515d8e09a97e7e39c3a9d4b00e616b6510a07ac39d653

    • SSDEEP

      768:hyI187beFSc+RX4qCw7kwGDGRfHBhdWIhoqJgGlzDpbuR1Jk:hyf7beMbIqCw7jcGX6EoOVJui

    • Mirai

      Mirai is a prevalent Linux malware infecting exposed network devices.

    • Mirai family

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    • Enumerates running processes

      Discovers information about currently running processes on the system

    • Writes file to system bin folder

MITRE ATT&CK Enterprise v15

Tasks