General

  • Target

    9f087e4dd1de1ad46cb4272004801ae0d3f499dd3fc0bdba8c7f45cc27aa09d4.elf

  • Size

    24KB

  • Sample

    250123-ejkvlaslgl

  • MD5

    a69124f33ec42b66057f21630f9c4027

  • SHA1

    dbba02abb6cdcfa68be166eb71aebe2187fb7a11

  • SHA256

    9f087e4dd1de1ad46cb4272004801ae0d3f499dd3fc0bdba8c7f45cc27aa09d4

  • SHA512

    75ed43ff8738e27cf24aebca9861ef43ff6061759315cff39c375e0916f68a21a7237ebc986992fae690880cb87fda4c0645ab11a5debbd1244fe50ae9e271c3

  • SSDEEP

    768:obrQlS07dEv0UXqUhvQE+CXQKMQKCXBpOZqSWvl:4QlS07FUXqIYSXQKquCqN

Malware Config

Extracted

Family

mirai

Botnet

LZRD

Targets

    • Target

      9f087e4dd1de1ad46cb4272004801ae0d3f499dd3fc0bdba8c7f45cc27aa09d4.elf

    • Size

      24KB

    • MD5

      a69124f33ec42b66057f21630f9c4027

    • SHA1

      dbba02abb6cdcfa68be166eb71aebe2187fb7a11

    • SHA256

      9f087e4dd1de1ad46cb4272004801ae0d3f499dd3fc0bdba8c7f45cc27aa09d4

    • SHA512

      75ed43ff8738e27cf24aebca9861ef43ff6061759315cff39c375e0916f68a21a7237ebc986992fae690880cb87fda4c0645ab11a5debbd1244fe50ae9e271c3

    • SSDEEP

      768:obrQlS07dEv0UXqUhvQE+CXQKMQKCXBpOZqSWvl:4QlS07FUXqIYSXQKquCqN

    • Mirai

      Mirai is a prevalent Linux malware infecting exposed network devices.

    • Mirai family

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    • Writes file to system bin folder

MITRE ATT&CK Enterprise v15

Tasks