General

  • Target

    boooooos.mips.elf

  • Size

    27KB

  • Sample

    250117-ngjzyswkcn

  • MD5

    22eb9561e35cbac299cb1ddba8617776

  • SHA1

    5905c4c82e3d1091186191e30cb4b8f09b2a21da

  • SHA256

    3728ca146cddaa181e39a0a0a19f5e56437a6ef50687495ebdd658f62638143d

  • SHA512

    b49f8544a612a3b3c07beb7b9067798d191acb7bd1d57458b5653af92b04f5994716b111c8b8122f3702466ada5ea6da005f3aaf3f9442bd9af950eba4d668fd

  • SSDEEP

    768:01EC/0xrSerexnr9U8ppa/9G/1ggaTwafN8nJgGlzDpbuR1JD:01Z/0xrHrexr28v8G/1aTwa1GVJu9

Malware Config

Extracted

Family

mirai

Botnet

LZRD

Targets

    • Target

      boooooos.mips.elf

    • Size

      27KB

    • MD5

      22eb9561e35cbac299cb1ddba8617776

    • SHA1

      5905c4c82e3d1091186191e30cb4b8f09b2a21da

    • SHA256

      3728ca146cddaa181e39a0a0a19f5e56437a6ef50687495ebdd658f62638143d

    • SHA512

      b49f8544a612a3b3c07beb7b9067798d191acb7bd1d57458b5653af92b04f5994716b111c8b8122f3702466ada5ea6da005f3aaf3f9442bd9af950eba4d668fd

    • SSDEEP

      768:01EC/0xrSerexnr9U8ppa/9G/1ggaTwafN8nJgGlzDpbuR1JD:01Z/0xrHrexr28v8G/1aTwa1GVJu9

    • Mirai

      Mirai is a prevalent Linux malware infecting exposed network devices.

    • Mirai family

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    • Writes file to system bin folder

MITRE ATT&CK Enterprise v15

Tasks