General

  • Target

    b4e7fffa9263801304184a1320ecd80caacba77684b2036c794de3a97b0b74cf.elf

  • Size

    51KB

  • Sample

    250118-fgbdtatqfr

  • MD5

    cb2aebb237120d0d3069d867644539be

  • SHA1

    54c2bab18e4b778dbcad535c2fa407ac9611a382

  • SHA256

    b4e7fffa9263801304184a1320ecd80caacba77684b2036c794de3a97b0b74cf

  • SHA512

    b79e6664afaeae8e6e87d7f9de34d9d37c7551c46264e57eaa12d50461bd36e628df4ba4ad614bce33871221f32637c69cc8d3fe28680b2e09fa52b3567f59c2

  • SSDEEP

    1536:+3H1mBVBtyolQoIa/egXqVFQESTbTutpfPVmzHeB:+3YBVBQox72ga7QECuvXVmreB

Malware Config

Extracted

Family

mirai

Botnet

LZRD

Targets

    • Target

      b4e7fffa9263801304184a1320ecd80caacba77684b2036c794de3a97b0b74cf.elf

    • Size

      51KB

    • MD5

      cb2aebb237120d0d3069d867644539be

    • SHA1

      54c2bab18e4b778dbcad535c2fa407ac9611a382

    • SHA256

      b4e7fffa9263801304184a1320ecd80caacba77684b2036c794de3a97b0b74cf

    • SHA512

      b79e6664afaeae8e6e87d7f9de34d9d37c7551c46264e57eaa12d50461bd36e628df4ba4ad614bce33871221f32637c69cc8d3fe28680b2e09fa52b3567f59c2

    • SSDEEP

      1536:+3H1mBVBtyolQoIa/egXqVFQESTbTutpfPVmzHeB:+3YBVBQox72ga7QECuvXVmreB

    • Mirai

      Mirai is a prevalent Linux malware infecting exposed network devices.

    • Mirai family

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    • Enumerates running processes

      Discovers information about currently running processes on the system

    • Writes file to system bin folder

MITRE ATT&CK Enterprise v15

Tasks