General

  • Target

    05541f50057a9eb86c2391be07c968453e00f63c1def17b659cfa30f981d8c2c.elf

  • Size

    29KB

  • Sample

    250120-cfxzmswmhr

  • MD5

    3fc96545548025bcbd0277799269fc56

  • SHA1

    f9377264f4a4b6f41b3e85fe67d2f5e660184b3e

  • SHA256

    05541f50057a9eb86c2391be07c968453e00f63c1def17b659cfa30f981d8c2c

  • SHA512

    9a1e94900ca4368192f3931847824cd2bb2bf928fcbcaea3197d90e0814dadba3a1258ad2f593f00c8036017bc49fd68369d8e2e32238f5903c5e30016d8b5d1

  • SSDEEP

    768:qzMioRCNCbSRVmFspQa/bXaAgaO850fE5E2vHnbcuyD7UoQRj4:ScIRshSXaAgaO850ynouy8oyM

Malware Config

Extracted

Family

mirai

Botnet

LZRD

Targets

    • Target

      05541f50057a9eb86c2391be07c968453e00f63c1def17b659cfa30f981d8c2c.elf

    • Size

      29KB

    • MD5

      3fc96545548025bcbd0277799269fc56

    • SHA1

      f9377264f4a4b6f41b3e85fe67d2f5e660184b3e

    • SHA256

      05541f50057a9eb86c2391be07c968453e00f63c1def17b659cfa30f981d8c2c

    • SHA512

      9a1e94900ca4368192f3931847824cd2bb2bf928fcbcaea3197d90e0814dadba3a1258ad2f593f00c8036017bc49fd68369d8e2e32238f5903c5e30016d8b5d1

    • SSDEEP

      768:qzMioRCNCbSRVmFspQa/bXaAgaO850fE5E2vHnbcuyD7UoQRj4:ScIRshSXaAgaO850ynouy8oyM

    • Mirai

      Mirai is a prevalent Linux malware infecting exposed network devices.

    • Mirai family

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    • Enumerates running processes

      Discovers information about currently running processes on the system

    • Writes file to system bin folder

MITRE ATT&CK Enterprise v15

Tasks