General

  • Target

    29ed081ca6cc35e1c5b875da687eedcbde9a58249d0e75e973388f85c5691520.elf

  • Size

    37KB

  • Sample

    250114-cqssnswnal

  • MD5

    f6cbac4b6428c01a0e2df85f198a2c85

  • SHA1

    ee4bffe3d9cb63e7ff1f20101c5d9b8ccf275ae2

  • SHA256

    29ed081ca6cc35e1c5b875da687eedcbde9a58249d0e75e973388f85c5691520

  • SHA512

    8f158e91cd5c6797da5d1c2d8e5cb408983c135eb4f6a31e54716799ded43ddfe048a9d31f37625e3cd9036c2e9b4d4c7869a2532066d4f3a3a4bf2b2229053b

  • SSDEEP

    768:CF4o5gt3IEG6Ks1mqDUKf+8hr89kxcEDV/SLXQlov0zBZLvad4mwu0eci7zzW/:El5JnsrXvrKy9QjyBZLvDmR0GPS

Malware Config

Extracted

Family

mirai

Botnet

LZRD

Targets

    • Target

      29ed081ca6cc35e1c5b875da687eedcbde9a58249d0e75e973388f85c5691520.elf

    • Size

      37KB

    • MD5

      f6cbac4b6428c01a0e2df85f198a2c85

    • SHA1

      ee4bffe3d9cb63e7ff1f20101c5d9b8ccf275ae2

    • SHA256

      29ed081ca6cc35e1c5b875da687eedcbde9a58249d0e75e973388f85c5691520

    • SHA512

      8f158e91cd5c6797da5d1c2d8e5cb408983c135eb4f6a31e54716799ded43ddfe048a9d31f37625e3cd9036c2e9b4d4c7869a2532066d4f3a3a4bf2b2229053b

    • SSDEEP

      768:CF4o5gt3IEG6Ks1mqDUKf+8hr89kxcEDV/SLXQlov0zBZLvad4mwu0eci7zzW/:El5JnsrXvrKy9QjyBZLvDmR0GPS

    • Mirai

      Mirai is a prevalent Linux malware infecting exposed network devices.

    • Mirai family

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    • Enumerates running processes

      Discovers information about currently running processes on the system

    • Writes file to system bin folder

MITRE ATT&CK Enterprise v15

Tasks