General

  • Target

    2e6398da57aae86ced253d9411da2f41f9446ba35adcf2870cd4f219368f8212.elf

  • Size

    19KB

  • Sample

    250114-crzbvawncn

  • MD5

    9fdbc0d52615f951689fdf0a992b1cc0

  • SHA1

    a3886419c9b8d1d69f933d091f86cb55acfbc1bc

  • SHA256

    2e6398da57aae86ced253d9411da2f41f9446ba35adcf2870cd4f219368f8212

  • SHA512

    d06e8220cef72a182ee6b1af292c1954b3eca0f127e206ea47c902c813157a4429a1ab47e6caf5604a29e5e38124b274648d4fd31c1ed85ca933ccd1f9611e9e

  • SSDEEP

    384:MmBfInkrU0LUbB5ZU6KliSRJJzBZD2FRafkxp0L/SIv1RB:zfw0Hg1oHwujZD2FXAB

Malware Config

Extracted

Family

mirai

Botnet

LZRD

Targets

    • Target

      2e6398da57aae86ced253d9411da2f41f9446ba35adcf2870cd4f219368f8212.elf

    • Size

      19KB

    • MD5

      9fdbc0d52615f951689fdf0a992b1cc0

    • SHA1

      a3886419c9b8d1d69f933d091f86cb55acfbc1bc

    • SHA256

      2e6398da57aae86ced253d9411da2f41f9446ba35adcf2870cd4f219368f8212

    • SHA512

      d06e8220cef72a182ee6b1af292c1954b3eca0f127e206ea47c902c813157a4429a1ab47e6caf5604a29e5e38124b274648d4fd31c1ed85ca933ccd1f9611e9e

    • SSDEEP

      384:MmBfInkrU0LUbB5ZU6KliSRJJzBZD2FRafkxp0L/SIv1RB:zfw0Hg1oHwujZD2FXAB

    • Mirai

      Mirai is a prevalent Linux malware infecting exposed network devices.

    • Mirai family

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    • Enumerates running processes

      Discovers information about currently running processes on the system

    • Writes file to system bin folder

MITRE ATT&CK Enterprise v15

Tasks