General

  • Target

    d7cb7839393965e424f79ddf40b668be40a89e72215fb5a1a0d4cae5302c04c4.elf

  • Size

    45KB

  • Sample

    250123-ev99masrdn

  • MD5

    49052ca361c4f58e9494e9b53c59b0f7

  • SHA1

    d4e98620ef1d07737a432a4b67960d98bb86e33b

  • SHA256

    d7cb7839393965e424f79ddf40b668be40a89e72215fb5a1a0d4cae5302c04c4

  • SHA512

    e39daf59561ee6026305cf7e16fcc3b2b65a42f96b1644ca9f8cc120997bee559cac02b621030f6647420ca8833006081681aa882fd9c9b214b33cefb6588caf

  • SSDEEP

    768:g/TYCoIxdEk+AxoTZAZHFeq8b3L/9q3UELbUXfi6nVMQHI4vcGpvP:gECFd+A6YHAxaLRQZP

Malware Config

Extracted

Family

mirai

Botnet

LZRD

Targets

    • Target

      d7cb7839393965e424f79ddf40b668be40a89e72215fb5a1a0d4cae5302c04c4.elf

    • Size

      45KB

    • MD5

      49052ca361c4f58e9494e9b53c59b0f7

    • SHA1

      d4e98620ef1d07737a432a4b67960d98bb86e33b

    • SHA256

      d7cb7839393965e424f79ddf40b668be40a89e72215fb5a1a0d4cae5302c04c4

    • SHA512

      e39daf59561ee6026305cf7e16fcc3b2b65a42f96b1644ca9f8cc120997bee559cac02b621030f6647420ca8833006081681aa882fd9c9b214b33cefb6588caf

    • SSDEEP

      768:g/TYCoIxdEk+AxoTZAZHFeq8b3L/9q3UELbUXfi6nVMQHI4vcGpvP:gECFd+A6YHAxaLRQZP

    • Mirai

      Mirai is a prevalent Linux malware infecting exposed network devices.

    • Mirai family

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    • Writes file to system bin folder

MITRE ATT&CK Enterprise v15

Tasks