General

  • Target

    66249844e67eb34c8670ad2dad2919fa216e079e85762eabb322d9d6ea7ce486.elf

  • Size

    23KB

  • Sample

    250123-eblf6azrex

  • MD5

    91132a92035fd261416c638c29987be9

  • SHA1

    fe8fdf066c7f46e9b5d38afd3cb93db694afbdea

  • SHA256

    66249844e67eb34c8670ad2dad2919fa216e079e85762eabb322d9d6ea7ce486

  • SHA512

    c61f2b0828a3bf2eca3b68e4e43885ec73099c27cab4ba82208011a1ffae94b2f4d35cf9439725cfbe08ad09a1643811f05148169b58d0d75e4a0df679b8afe4

  • SSDEEP

    384:neD8ZSH2LLZUYyGZbsOiTrowSN9rnZMINlphQ/HYtuidHmdzJgGlzDpH7uNj1JAL:neD8ZSWvZHZbs1row697qohQvg9dizJp

Malware Config

Extracted

Family

mirai

Botnet

LZRD

Targets

    • Target

      66249844e67eb34c8670ad2dad2919fa216e079e85762eabb322d9d6ea7ce486.elf

    • Size

      23KB

    • MD5

      91132a92035fd261416c638c29987be9

    • SHA1

      fe8fdf066c7f46e9b5d38afd3cb93db694afbdea

    • SHA256

      66249844e67eb34c8670ad2dad2919fa216e079e85762eabb322d9d6ea7ce486

    • SHA512

      c61f2b0828a3bf2eca3b68e4e43885ec73099c27cab4ba82208011a1ffae94b2f4d35cf9439725cfbe08ad09a1643811f05148169b58d0d75e4a0df679b8afe4

    • SSDEEP

      384:neD8ZSH2LLZUYyGZbsOiTrowSN9rnZMINlphQ/HYtuidHmdzJgGlzDpH7uNj1JAL:neD8ZSWvZHZbs1row697qohQvg9dizJp

    • Mirai

      Mirai is a prevalent Linux malware infecting exposed network devices.

    • Mirai family

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    • Writes file to system bin folder

MITRE ATT&CK Enterprise v15

Tasks