General

  • Target

    a8cbba23e7c866ccf3dc8b4d4e1cc5a51de83272cb6f8df8746a51a2817d8f7b.elf

  • Size

    29KB

  • Sample

    250113-c569ls1rhz

  • MD5

    545dbe1d228295c958b5a3f6ec4d8278

  • SHA1

    f8dff366ea07681be596cdb33911c3f4119d0763

  • SHA256

    a8cbba23e7c866ccf3dc8b4d4e1cc5a51de83272cb6f8df8746a51a2817d8f7b

  • SHA512

    fe2115ad64b5755a4b4d71660d8de94c0a7f3f7d9eb3519a6e82216621f83d0855a32c41963b22dabac02e9d82c95cca8efce568d2fdafd8123e4f443c335a3f

  • SSDEEP

    768:qzMioRCNCd781gwRrQaNn9TrTL94sNvPOuIWljnbcuyD7UoQRjk:ScD7kgCcoBfJ4sN+uIWNnouy8oyI

Malware Config

Extracted

Family

mirai

Botnet

LZRD

Targets

    • Target

      a8cbba23e7c866ccf3dc8b4d4e1cc5a51de83272cb6f8df8746a51a2817d8f7b.elf

    • Size

      29KB

    • MD5

      545dbe1d228295c958b5a3f6ec4d8278

    • SHA1

      f8dff366ea07681be596cdb33911c3f4119d0763

    • SHA256

      a8cbba23e7c866ccf3dc8b4d4e1cc5a51de83272cb6f8df8746a51a2817d8f7b

    • SHA512

      fe2115ad64b5755a4b4d71660d8de94c0a7f3f7d9eb3519a6e82216621f83d0855a32c41963b22dabac02e9d82c95cca8efce568d2fdafd8123e4f443c335a3f

    • SSDEEP

      768:qzMioRCNCd781gwRrQaNn9TrTL94sNvPOuIWljnbcuyD7UoQRjk:ScD7kgCcoBfJ4sN+uIWNnouy8oyI

    • Mirai

      Mirai is a prevalent Linux malware infecting exposed network devices.

    • Mirai family

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    • Enumerates running processes

      Discovers information about currently running processes on the system

    • Writes file to system bin folder

MITRE ATT&CK Enterprise v15

Tasks