General

  • Target

    boooooo64.elf

  • Size

    31KB

  • Sample

    250117-a2bx7awnes

  • MD5

    7d0e58794721924425ff5e29bbf821ae

  • SHA1

    4d31cbee7a8f5cbb1d7b603a452b2f4d51b2068a

  • SHA256

    eee4c4030b37dcb39407239fb350d781d363d8e4d1d2f3a4d857849966820008

  • SHA512

    71bbc125c2df316c0878d83d822c0220bc460d46a1eda360022ecf8e87a6efe7cb9e15e6c18faa519f5c3509a3c24c5f60dbc78b2e299014f34aea7913e8b32c

  • SSDEEP

    768:y+T4bCNmgZ6Em3fpqGTSNOvh/f0l4LzPzlJCcRelRSeoDrCH/ThJNkM3:y+TmCF6xqGKQ4Qjejh4rO/T7GM3

Malware Config

Extracted

Family

mirai

Botnet

LZRD

Targets

    • Target

      boooooo64.elf

    • Size

      31KB

    • MD5

      7d0e58794721924425ff5e29bbf821ae

    • SHA1

      4d31cbee7a8f5cbb1d7b603a452b2f4d51b2068a

    • SHA256

      eee4c4030b37dcb39407239fb350d781d363d8e4d1d2f3a4d857849966820008

    • SHA512

      71bbc125c2df316c0878d83d822c0220bc460d46a1eda360022ecf8e87a6efe7cb9e15e6c18faa519f5c3509a3c24c5f60dbc78b2e299014f34aea7913e8b32c

    • SSDEEP

      768:y+T4bCNmgZ6Em3fpqGTSNOvh/f0l4LzPzlJCcRelRSeoDrCH/ThJNkM3:y+TmCF6xqGKQ4Qjejh4rO/T7GM3

    • Mirai

      Mirai is a prevalent Linux malware infecting exposed network devices.

    • Mirai family

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    • Enumerates running processes

      Discovers information about currently running processes on the system

    • Writes file to system bin folder

MITRE ATT&CK Enterprise v15

Tasks