General

  • Target

    camp.mips.elf

  • Size

    37KB

  • Sample

    250113-17b39ayqbz

  • MD5

    c6c14dc6fbc05361ff7c98995f161cba

  • SHA1

    0d8d6b3304fa714d462f6a1d332c385c57a5da47

  • SHA256

    3fb29ca6184afd70cbab4b67f483bd8bfea0be22cefe97929e84f49e14fbe1fe

  • SHA512

    eaf8bd0acd20169168d6174327668714341277bd7b4e3af8e29eec951421af9ff575c802e8ce108c64e9f1418ece9a966b4808159f54519106298441dd1ee899

  • SSDEEP

    768:cgN29x3ZpzZ5VjNuvtE54Fe7GbxBDbYsPs4P5zTqUJgGlzDpbuR1JW:q9xJZZNKNFjBfRUMQMVJuk

Malware Config

Extracted

Family

mirai

Botnet

LZRD

Targets

    • Target

      camp.mips.elf

    • Size

      37KB

    • MD5

      c6c14dc6fbc05361ff7c98995f161cba

    • SHA1

      0d8d6b3304fa714d462f6a1d332c385c57a5da47

    • SHA256

      3fb29ca6184afd70cbab4b67f483bd8bfea0be22cefe97929e84f49e14fbe1fe

    • SHA512

      eaf8bd0acd20169168d6174327668714341277bd7b4e3af8e29eec951421af9ff575c802e8ce108c64e9f1418ece9a966b4808159f54519106298441dd1ee899

    • SSDEEP

      768:cgN29x3ZpzZ5VjNuvtE54Fe7GbxBDbYsPs4P5zTqUJgGlzDpbuR1JW:q9xJZZNKNFjBfRUMQMVJuk

    • Mirai

      Mirai is a prevalent Linux malware infecting exposed network devices.

    • Mirai family

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    • Enumerates running processes

      Discovers information about currently running processes on the system

    • Writes file to system bin folder

MITRE ATT&CK Enterprise v15

Tasks