General

  • Target

    90d6eda71edf95d4725c5964e91f20773216f2a3fd2612f622c84f9882f8d76c.elf

  • Size

    21KB

  • Sample

    250116-dm549symdz

  • MD5

    fc95c5a4d7d9c1e178a8e80e090b8905

  • SHA1

    5fb56e634e84971799b2669d4ccea3b8fc33411b

  • SHA256

    90d6eda71edf95d4725c5964e91f20773216f2a3fd2612f622c84f9882f8d76c

  • SHA512

    f6314e069f33beff7489022f0a0c297d72598bbd7bfbfbc4139ec834a46d0caf1a2368bf5f5a3e38865a0da8d79d06f366cbfdbac465e2f7b67cf20f9b1224b2

  • SSDEEP

    384:UvtIoZxrSniaXs+qx+bwqPX+VOcFd5fHq52lxjAghymdGUop5hn:UvQn4j+ZO5fKAlxcgs3Uozl

Malware Config

Extracted

Family

mirai

Botnet

LZRD

Targets

    • Target

      90d6eda71edf95d4725c5964e91f20773216f2a3fd2612f622c84f9882f8d76c.elf

    • Size

      21KB

    • MD5

      fc95c5a4d7d9c1e178a8e80e090b8905

    • SHA1

      5fb56e634e84971799b2669d4ccea3b8fc33411b

    • SHA256

      90d6eda71edf95d4725c5964e91f20773216f2a3fd2612f622c84f9882f8d76c

    • SHA512

      f6314e069f33beff7489022f0a0c297d72598bbd7bfbfbc4139ec834a46d0caf1a2368bf5f5a3e38865a0da8d79d06f366cbfdbac465e2f7b67cf20f9b1224b2

    • SSDEEP

      384:UvtIoZxrSniaXs+qx+bwqPX+VOcFd5fHq52lxjAghymdGUop5hn:UvQn4j+ZO5fKAlxcgs3Uozl

    • Mirai

      Mirai is a prevalent Linux malware infecting exposed network devices.

    • Mirai family

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    • Enumerates running processes

      Discovers information about currently running processes on the system

    • Writes file to system bin folder

MITRE ATT&CK Enterprise v15

Tasks