General

  • Target

    97f6c6ff8124892729dda38ccb275462799336d6350accff4ea0944bd4e9dce5.elf

  • Size

    45KB

  • Sample

    250116-dpx7faync1

  • MD5

    88a8b4e1a053f675ea7dd41fc2d684fb

  • SHA1

    9b1067a9b353bc4eef7f3693dc304d5bdb5e97d9

  • SHA256

    97f6c6ff8124892729dda38ccb275462799336d6350accff4ea0944bd4e9dce5

  • SHA512

    eec4c59c918aa1a37df0d535cd1780d856564b379e71d26d37845e2a33894ceabf432c6d4165ec2ee412fd72bc9fe67f984242bfa662ed629c81e9dd257c1dc9

  • SSDEEP

    768:D/TYCoIxdEk+AxoTZAZHFeq8b3IV9q3UELbUXfi6nVMQHI4vcGpvF:DECFd+A6YHAxIoLRQZF

Malware Config

Extracted

Family

mirai

Botnet

LZRD

Targets

    • Target

      97f6c6ff8124892729dda38ccb275462799336d6350accff4ea0944bd4e9dce5.elf

    • Size

      45KB

    • MD5

      88a8b4e1a053f675ea7dd41fc2d684fb

    • SHA1

      9b1067a9b353bc4eef7f3693dc304d5bdb5e97d9

    • SHA256

      97f6c6ff8124892729dda38ccb275462799336d6350accff4ea0944bd4e9dce5

    • SHA512

      eec4c59c918aa1a37df0d535cd1780d856564b379e71d26d37845e2a33894ceabf432c6d4165ec2ee412fd72bc9fe67f984242bfa662ed629c81e9dd257c1dc9

    • SSDEEP

      768:D/TYCoIxdEk+AxoTZAZHFeq8b3IV9q3UELbUXfi6nVMQHI4vcGpvF:DECFd+A6YHAxIoLRQZF

    • Mirai

      Mirai is a prevalent Linux malware infecting exposed network devices.

    • Mirai family

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    • Writes file to system bin folder

MITRE ATT&CK Enterprise v15

Tasks