General

  • Target

    night.x86_64.elf

  • Size

    31KB

  • Sample

    250124-1yccnaslep

  • MD5

    c082f5b58ec1b2e7c88ce9f0eb0dceba

  • SHA1

    de72ee895a47cd59162f1280f963bf0eea74adfa

  • SHA256

    979cc95e6b2ff5edaa5ceced00b304ce39ca825d872ffbf6996b2168595ecb9f

  • SHA512

    eda8a6c4929a0f9868ebab938d28ae36616073d9e92fe399afe77831ae400d38715744d12f6bfde3cbb02cd726bccd95ea3796dbea9cf58bc933f32488c84d0f

  • SSDEEP

    768:iAGs1DDudwSC64ADv1p0LXevxHQVhrC+E8Oix070:tjSJ9BC6H4bHO0

Malware Config

Extracted

Family

mirai

Botnet

LZRD

Targets

    • Target

      night.x86_64.elf

    • Size

      31KB

    • MD5

      c082f5b58ec1b2e7c88ce9f0eb0dceba

    • SHA1

      de72ee895a47cd59162f1280f963bf0eea74adfa

    • SHA256

      979cc95e6b2ff5edaa5ceced00b304ce39ca825d872ffbf6996b2168595ecb9f

    • SHA512

      eda8a6c4929a0f9868ebab938d28ae36616073d9e92fe399afe77831ae400d38715744d12f6bfde3cbb02cd726bccd95ea3796dbea9cf58bc933f32488c84d0f

    • SSDEEP

      768:iAGs1DDudwSC64ADv1p0LXevxHQVhrC+E8Oix070:tjSJ9BC6H4bHO0

    • Mirai

      Mirai is a prevalent Linux malware infecting exposed network devices.

    • Mirai family

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    • Enumerates running processes

      Discovers information about currently running processes on the system

    • Writes file to system bin folder

MITRE ATT&CK Enterprise v15

Tasks