General

  • Target

    655cd3483b35ffea03fb1f3277f3fcb38c8e684723f7e459077099130de6ff31.elf

  • Size

    22KB

  • Sample

    250116-db43tsyrgl

  • MD5

    76e0e8df12ca4d1804dfc1640a5ff664

  • SHA1

    59c1f1704f3efc009f60d7b46e50041f82540bb9

  • SHA256

    655cd3483b35ffea03fb1f3277f3fcb38c8e684723f7e459077099130de6ff31

  • SHA512

    3ba900fb8d5b0f49357470cf791c35fe241dabb4b2b3613be33f623ac27dcd1dc2dfb5cddc56641fc253ea53a554fb0cba3eab8c52d294878ea693558ecc66ed

  • SSDEEP

    384:F/BctKdlw4DUrpZoNcepO235FUeZ062Zy46wMTa/bictgJwIlh7qmdGUEpiao:F/Bldlw4DUvgtpO2LUeC62E4cW/bttMB

Malware Config

Extracted

Family

mirai

Botnet

LZRD

Targets

    • Target

      655cd3483b35ffea03fb1f3277f3fcb38c8e684723f7e459077099130de6ff31.elf

    • Size

      22KB

    • MD5

      76e0e8df12ca4d1804dfc1640a5ff664

    • SHA1

      59c1f1704f3efc009f60d7b46e50041f82540bb9

    • SHA256

      655cd3483b35ffea03fb1f3277f3fcb38c8e684723f7e459077099130de6ff31

    • SHA512

      3ba900fb8d5b0f49357470cf791c35fe241dabb4b2b3613be33f623ac27dcd1dc2dfb5cddc56641fc253ea53a554fb0cba3eab8c52d294878ea693558ecc66ed

    • SSDEEP

      384:F/BctKdlw4DUrpZoNcepO235FUeZ062Zy46wMTa/bictgJwIlh7qmdGUEpiao:F/Bldlw4DUvgtpO2LUeC62E4cW/bttMB

    • Mirai

      Mirai is a prevalent Linux malware infecting exposed network devices.

    • Mirai family

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    • Traces itself

      Traces itself to prevent debugging attempts

    • Writes file to system bin folder

MITRE ATT&CK Enterprise v15

Tasks