General

  • Target

    c97db15d01a460ca3f27cb912aa72c04db96a5df0c6e7acb907bb398798264e4.elf

  • Size

    45KB

  • Sample

    250118-fkq9fatlfz

  • MD5

    b581104f04391b06fcd7d773588c88f0

  • SHA1

    d4a8f136f68a69c52b4d77d3c66e1c2f6cc4ba78

  • SHA256

    c97db15d01a460ca3f27cb912aa72c04db96a5df0c6e7acb907bb398798264e4

  • SHA512

    70c2a2f19b2e35507e85ac9de8b8a2658502c2f600ddc0e46d84c80619596c1598b7126ba5e657ac2b134f3c1794a8590df2d62155db9ad0096a92e545e260dc

  • SSDEEP

    768:D/TYCoIxdEk+AxoTZAZHFeq8b3pi9q3UELbUXfi6nVMQHI4vcGpvM:DECFd+A6YHAxpXLRQZM

Malware Config

Extracted

Family

mirai

Botnet

LZRD

Targets

    • Target

      c97db15d01a460ca3f27cb912aa72c04db96a5df0c6e7acb907bb398798264e4.elf

    • Size

      45KB

    • MD5

      b581104f04391b06fcd7d773588c88f0

    • SHA1

      d4a8f136f68a69c52b4d77d3c66e1c2f6cc4ba78

    • SHA256

      c97db15d01a460ca3f27cb912aa72c04db96a5df0c6e7acb907bb398798264e4

    • SHA512

      70c2a2f19b2e35507e85ac9de8b8a2658502c2f600ddc0e46d84c80619596c1598b7126ba5e657ac2b134f3c1794a8590df2d62155db9ad0096a92e545e260dc

    • SSDEEP

      768:D/TYCoIxdEk+AxoTZAZHFeq8b3pi9q3UELbUXfi6nVMQHI4vcGpvM:DECFd+A6YHAxpXLRQZM

    • Mirai

      Mirai is a prevalent Linux malware infecting exposed network devices.

    • Mirai family

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    • Enumerates running processes

      Discovers information about currently running processes on the system

    • Writes file to system bin folder

MITRE ATT&CK Enterprise v15

Tasks