General

  • Target

    d74da9a6f17ec3120d5bf51549dd48f22e391a3b1d7124c260ac313dfedc640b.elf

  • Size

    37KB

  • Sample

    250112-dv937awnam

  • MD5

    91d99a457e2507262fb29b8110f0a6ea

  • SHA1

    ef2bcd5e493fd2f04a6790aa4a07a49b42677c17

  • SHA256

    d74da9a6f17ec3120d5bf51549dd48f22e391a3b1d7124c260ac313dfedc640b

  • SHA512

    44160b5262d2819c144df6f5f7d50d2612a6cc44f5ec9bb6af6296725456e1aff8120ae1863cec8b2a193ff7f98dcdd647c84b138c38c3df175b8f68156be83f

  • SSDEEP

    768:UhpGLq2YEQh5q10MxYWt/y/1tgPUcDpLoKAjB8Wl:EpD2Ynjq10Qt/U89afp

Malware Config

Extracted

Family

mirai

Botnet

LZRD

Targets

    • Target

      d74da9a6f17ec3120d5bf51549dd48f22e391a3b1d7124c260ac313dfedc640b.elf

    • Size

      37KB

    • MD5

      91d99a457e2507262fb29b8110f0a6ea

    • SHA1

      ef2bcd5e493fd2f04a6790aa4a07a49b42677c17

    • SHA256

      d74da9a6f17ec3120d5bf51549dd48f22e391a3b1d7124c260ac313dfedc640b

    • SHA512

      44160b5262d2819c144df6f5f7d50d2612a6cc44f5ec9bb6af6296725456e1aff8120ae1863cec8b2a193ff7f98dcdd647c84b138c38c3df175b8f68156be83f

    • SSDEEP

      768:UhpGLq2YEQh5q10MxYWt/y/1tgPUcDpLoKAjB8Wl:EpD2Ynjq10Qt/U89afp

    • Mirai

      Mirai is a prevalent Linux malware infecting exposed network devices.

    • Mirai family

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    • Enumerates running processes

      Discovers information about currently running processes on the system

    • Writes file to system bin folder

MITRE ATT&CK Enterprise v15

Tasks