General

  • Target

    1ee8b2996d1ceb800d962878c83e6bf8ef67f3ea1bcba0cba0d49b31b3596336.elf

  • Size

    23KB

  • Sample

    250118-dp5ara1le1

  • MD5

    553fbff4e8c1e5b9468cc5d81f47f451

  • SHA1

    4c65f38b9adca335e1185d23447bbb3e4b61dbc6

  • SHA256

    1ee8b2996d1ceb800d962878c83e6bf8ef67f3ea1bcba0cba0d49b31b3596336

  • SHA512

    d3f9c1494e85673583ab60f697395de05e200006f03b1bfacd7ef0e17488d09c81e908266f765bb7c84771cfb39957f66350509c9b566d5ea50130763deadf85

  • SSDEEP

    384:YeD8ZSH2LLZUYyGZbsOiTrowSN9rnZMINlphQ/HYtui+UsmdtJgGlzDpH7uNj1Ja:YeD8ZSWvZHZbs1row697qohQvg9hsit9

Malware Config

Extracted

Family

mirai

Botnet

LZRD

Targets

    • Target

      1ee8b2996d1ceb800d962878c83e6bf8ef67f3ea1bcba0cba0d49b31b3596336.elf

    • Size

      23KB

    • MD5

      553fbff4e8c1e5b9468cc5d81f47f451

    • SHA1

      4c65f38b9adca335e1185d23447bbb3e4b61dbc6

    • SHA256

      1ee8b2996d1ceb800d962878c83e6bf8ef67f3ea1bcba0cba0d49b31b3596336

    • SHA512

      d3f9c1494e85673583ab60f697395de05e200006f03b1bfacd7ef0e17488d09c81e908266f765bb7c84771cfb39957f66350509c9b566d5ea50130763deadf85

    • SSDEEP

      384:YeD8ZSH2LLZUYyGZbsOiTrowSN9rnZMINlphQ/HYtui+UsmdtJgGlzDpH7uNj1Ja:YeD8ZSWvZHZbs1row697qohQvg9hsit9

    • Mirai

      Mirai is a prevalent Linux malware infecting exposed network devices.

    • Mirai family

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    • Writes file to system bin folder

MITRE ATT&CK Enterprise v15

Tasks