General

  • Target

    d59ad7f8e0cfb62d5257b96618a9682a7587b37150d14a476893f54b16d0f1ea.elf

  • Size

    21KB

  • Sample

    250122-d7ah4awndz

  • MD5

    90ba481a48baa2ba39c23da7937f4473

  • SHA1

    9405d268ae4ce19e4f4a4b6a92b64900e0a78ab0

  • SHA256

    d59ad7f8e0cfb62d5257b96618a9682a7587b37150d14a476893f54b16d0f1ea

  • SHA512

    f58ffc33d3f9297040ae9564025e63e3ddcfe5f0795e31b1a216979b40b6e276002988bf8f7e9ed4a28edbcd73bcbf602c45ae1e16799360a4cea2e97cf5aa16

  • SSDEEP

    384:vvtIoZxrSniaXs+qx+bwqPX+VOcFd5fHq52lxjsMfhymdGUop5h5:vvQn4j+ZO5fKAlxIMfs3Uoz/

Malware Config

Extracted

Family

mirai

Botnet

LZRD

Targets

    • Target

      d59ad7f8e0cfb62d5257b96618a9682a7587b37150d14a476893f54b16d0f1ea.elf

    • Size

      21KB

    • MD5

      90ba481a48baa2ba39c23da7937f4473

    • SHA1

      9405d268ae4ce19e4f4a4b6a92b64900e0a78ab0

    • SHA256

      d59ad7f8e0cfb62d5257b96618a9682a7587b37150d14a476893f54b16d0f1ea

    • SHA512

      f58ffc33d3f9297040ae9564025e63e3ddcfe5f0795e31b1a216979b40b6e276002988bf8f7e9ed4a28edbcd73bcbf602c45ae1e16799360a4cea2e97cf5aa16

    • SSDEEP

      384:vvtIoZxrSniaXs+qx+bwqPX+VOcFd5fHq52lxjsMfhymdGUop5h5:vvQn4j+ZO5fKAlxIMfs3Uoz/

    • Mirai

      Mirai is a prevalent Linux malware infecting exposed network devices.

    • Mirai family

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    • Enumerates running processes

      Discovers information about currently running processes on the system

    • Writes file to system bin folder

MITRE ATT&CK Enterprise v15

Tasks