General

  • Target

    camp.x86_64.elf

  • Size

    36KB

  • Sample

    250113-2h486szjfy

  • MD5

    5872e361c75eb6d934fec4f7ae32dc70

  • SHA1

    6d5c97236ba057e124b51445d49e5df7602fa915

  • SHA256

    e5dd3b3de502814e1bc66d6b3bb3244eb848cb299b85c323586347d939563f1d

  • SHA512

    c05b6151584da7ba6724ce780287cdf96e26d3489f633e195ac34af21d4ad3d7ca73df53535aed6d9fe01d45b790613d0856d33be05e66c69b571970fa02a448

  • SSDEEP

    768:AwS0nQr9tpJEu0annIBqVqVHmwIHWUFtGtzXKT1oS7tUx0nZG:rOX80VqVi2otGtzXEqMZG

Malware Config

Extracted

Family

mirai

Botnet

LZRD

Targets

    • Target

      camp.x86_64.elf

    • Size

      36KB

    • MD5

      5872e361c75eb6d934fec4f7ae32dc70

    • SHA1

      6d5c97236ba057e124b51445d49e5df7602fa915

    • SHA256

      e5dd3b3de502814e1bc66d6b3bb3244eb848cb299b85c323586347d939563f1d

    • SHA512

      c05b6151584da7ba6724ce780287cdf96e26d3489f633e195ac34af21d4ad3d7ca73df53535aed6d9fe01d45b790613d0856d33be05e66c69b571970fa02a448

    • SSDEEP

      768:AwS0nQr9tpJEu0annIBqVqVHmwIHWUFtGtzXKT1oS7tUx0nZG:rOX80VqVi2otGtzXEqMZG

    • Mirai

      Mirai is a prevalent Linux malware infecting exposed network devices.

    • Mirai family

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    • Enumerates running processes

      Discovers information about currently running processes on the system

    • Writes file to system bin folder

MITRE ATT&CK Enterprise v15

Tasks