General

  • Target

    5366ef37d482d37f05ed7b3138b83579dd35c0a47e21bf5df63c9a7b24be40ac.elf

  • Size

    23KB

  • Sample

    250126-d1yx4szpes

  • MD5

    a707c2e2633e0a7e1802bc418d61cff7

  • SHA1

    41bda3be4058fe487cec6ccd716354d4c5fb6e16

  • SHA256

    5366ef37d482d37f05ed7b3138b83579dd35c0a47e21bf5df63c9a7b24be40ac

  • SHA512

    61eb40201080dbc1cc649197a0be1d781c082e92014ae4383bd6a5d5f55a3fa1887f17359a40116849e5e97c97c9d0c0b2a818250437ddac17c93d7ea0f98f8d

  • SSDEEP

    384:neD8ZSH2LLZUYyGZbsOiTrowSN9rnZMINlphQ/HYtuidlmdzJgGlzDpH7uNj1JA0:neD8ZSWvZHZbs1row697qohQvg9nizJ+

Malware Config

Extracted

Family

mirai

Botnet

LZRD

Targets

    • Target

      5366ef37d482d37f05ed7b3138b83579dd35c0a47e21bf5df63c9a7b24be40ac.elf

    • Size

      23KB

    • MD5

      a707c2e2633e0a7e1802bc418d61cff7

    • SHA1

      41bda3be4058fe487cec6ccd716354d4c5fb6e16

    • SHA256

      5366ef37d482d37f05ed7b3138b83579dd35c0a47e21bf5df63c9a7b24be40ac

    • SHA512

      61eb40201080dbc1cc649197a0be1d781c082e92014ae4383bd6a5d5f55a3fa1887f17359a40116849e5e97c97c9d0c0b2a818250437ddac17c93d7ea0f98f8d

    • SSDEEP

      384:neD8ZSH2LLZUYyGZbsOiTrowSN9rnZMINlphQ/HYtuidlmdzJgGlzDpH7uNj1JA0:neD8ZSWvZHZbs1row697qohQvg9nizJ+

    • Mirai

      Mirai is a prevalent Linux malware infecting exposed network devices.

    • Mirai family

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    • Writes file to system bin folder

MITRE ATT&CK Enterprise v15

Tasks