General

  • Target

    9b575c4bc969c455014d87cbfcd78d819cd44840ae51b5648be30d699e1f085b.elf

  • Size

    34KB

  • Sample

    250113-c13evs1ph1

  • MD5

    e464c12da31541e5b14e9d6a716589f0

  • SHA1

    9f6fc1b010e7c64d58d8e3271914c9ce91aa711e

  • SHA256

    9b575c4bc969c455014d87cbfcd78d819cd44840ae51b5648be30d699e1f085b

  • SHA512

    7ac06976d1a8b42db9c7a1b895fea84ccb99e5dec7cc890547b39ac51e5b1c35d478cbde09b16599e5041704b3f8f6c553b22ad8d4abfacd77dd986030e78338

  • SSDEEP

    768:WCkGi0D/4BfI7dZnRh7/IN0BIesyoXKot5V4oEAIp1XHBx7nbcuyD7UHQRjK:WBGbyqhXrTBrQX4oE/HTnouy8HyG

Malware Config

Extracted

Family

mirai

Botnet

LZRD

Targets

    • Target

      9b575c4bc969c455014d87cbfcd78d819cd44840ae51b5648be30d699e1f085b.elf

    • Size

      34KB

    • MD5

      e464c12da31541e5b14e9d6a716589f0

    • SHA1

      9f6fc1b010e7c64d58d8e3271914c9ce91aa711e

    • SHA256

      9b575c4bc969c455014d87cbfcd78d819cd44840ae51b5648be30d699e1f085b

    • SHA512

      7ac06976d1a8b42db9c7a1b895fea84ccb99e5dec7cc890547b39ac51e5b1c35d478cbde09b16599e5041704b3f8f6c553b22ad8d4abfacd77dd986030e78338

    • SSDEEP

      768:WCkGi0D/4BfI7dZnRh7/IN0BIesyoXKot5V4oEAIp1XHBx7nbcuyD7UHQRjK:WBGbyqhXrTBrQX4oE/HTnouy8HyG

    • Mirai

      Mirai is a prevalent Linux malware infecting exposed network devices.

    • Mirai family

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    • Enumerates running processes

      Discovers information about currently running processes on the system

    • Writes file to system bin folder

MITRE ATT&CK Enterprise v15

Tasks