General

  • Target

    402db8d1117a944d4752270a2a2bb1467564aa6bcc215e8c7c87ef50c718ca63.elf

  • Size

    31KB

  • Sample

    250120-cv1zvaxkhr

  • MD5

    31fb8b7c3f112d0c2745e23d514247e3

  • SHA1

    5be6f0d225331a04523b48afe16c530692cadece

  • SHA256

    402db8d1117a944d4752270a2a2bb1467564aa6bcc215e8c7c87ef50c718ca63

  • SHA512

    8b2b09438445ba0eb6a8acce2a43ab3e400663277c933362633e6976237fa33a38edc649185c76f4904b58514c92a9b7d3cb8025291cf75303ddf07217426911

  • SSDEEP

    768:puUWo51jxp/V7JXyAZvsH48qfyBBbsId+HxW3:tWy1vV7xzZ0H4VfasId+Hc

Malware Config

Extracted

Family

mirai

Botnet

LZRD

Targets

    • Target

      402db8d1117a944d4752270a2a2bb1467564aa6bcc215e8c7c87ef50c718ca63.elf

    • Size

      31KB

    • MD5

      31fb8b7c3f112d0c2745e23d514247e3

    • SHA1

      5be6f0d225331a04523b48afe16c530692cadece

    • SHA256

      402db8d1117a944d4752270a2a2bb1467564aa6bcc215e8c7c87ef50c718ca63

    • SHA512

      8b2b09438445ba0eb6a8acce2a43ab3e400663277c933362633e6976237fa33a38edc649185c76f4904b58514c92a9b7d3cb8025291cf75303ddf07217426911

    • SSDEEP

      768:puUWo51jxp/V7JXyAZvsH48qfyBBbsId+HxW3:tWy1vV7xzZ0H4VfasId+Hc

    • Mirai

      Mirai is a prevalent Linux malware infecting exposed network devices.

    • Mirai family

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    • Enumerates running processes

      Discovers information about currently running processes on the system

    • Writes file to system bin folder

MITRE ATT&CK Enterprise v15

Tasks