Resubmissions

15-01-2025 15:27

250115-svve3ayjan 10

15-01-2025 14:48

250115-r6e9vaxkhq 10

General

  • Target

    ub8ehJSePAfc9FYqZIT6.x86.elf

  • Size

    17KB

  • Sample

    250115-svve3ayjan

  • MD5

    7047743c1c83a0795d0dca26866356f7

  • SHA1

    a9460c8c41f103440b5073bc74b8bf1920c31629

  • SHA256

    c9fd0cf82e10175573b4aecded601b4958954975a22ec48915ac61fc43db70ea

  • SHA512

    96673f7f2faaa5b8cece9aec2dd6ed35af70e0f237a00806d155b14c6f617513ba539ccee32ac62743cc1005d0e3abc32d22468d570d9977382d10f843fbf39d

  • SSDEEP

    384:MXVj+SEvm8rAKjYZuX4MIp3KcDjKeAY8E8eNkUpqTcQj0UXv1R9OTn:u+SjgX/mayjJd8INprUIn

Malware Config

Extracted

Family

mirai

Botnet

LZRD

Targets

    • Target

      ub8ehJSePAfc9FYqZIT6.x86.elf

    • Size

      17KB

    • MD5

      7047743c1c83a0795d0dca26866356f7

    • SHA1

      a9460c8c41f103440b5073bc74b8bf1920c31629

    • SHA256

      c9fd0cf82e10175573b4aecded601b4958954975a22ec48915ac61fc43db70ea

    • SHA512

      96673f7f2faaa5b8cece9aec2dd6ed35af70e0f237a00806d155b14c6f617513ba539ccee32ac62743cc1005d0e3abc32d22468d570d9977382d10f843fbf39d

    • SSDEEP

      384:MXVj+SEvm8rAKjYZuX4MIp3KcDjKeAY8E8eNkUpqTcQj0UXv1R9OTn:u+SjgX/mayjJd8INprUIn

    • Mirai

      Mirai is a prevalent Linux malware infecting exposed network devices.

    • Mirai family

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    • Traces itself

      Traces itself to prevent debugging attempts

    • Enumerates running processes

      Discovers information about currently running processes on the system

    • Writes file to system bin folder

MITRE ATT&CK Enterprise v15

Tasks