General

  • Target

    57eedd22106b0c148c6be833f6db510f1769338fb658407348ac067c4133514d.elf

  • Size

    21KB

  • Sample

    250126-d2ekvssjcj

  • MD5

    22922b9a683f772ff4b0cac15fd9c4b7

  • SHA1

    bc334cdaffa2b1815200a7fbf8b48b1a8c68b24b

  • SHA256

    57eedd22106b0c148c6be833f6db510f1769338fb658407348ac067c4133514d

  • SHA512

    58e95403321fe525a86628c6a203c362f64e1429e5c4b3849326f2ea85d6ac96165194c7f2cb3ff0a2ac66f5eae743a7f1e2b75746a6405c17828b3634079f55

  • SSDEEP

    384:vvtIoZxrSniaXs+qx+bwqPX+VOcFd5fHq52lxjsUmhymdGUop5hY:vvQn4j+ZO5fKAlxo5s3UozO

Malware Config

Extracted

Family

mirai

Botnet

LZRD

Targets

    • Target

      57eedd22106b0c148c6be833f6db510f1769338fb658407348ac067c4133514d.elf

    • Size

      21KB

    • MD5

      22922b9a683f772ff4b0cac15fd9c4b7

    • SHA1

      bc334cdaffa2b1815200a7fbf8b48b1a8c68b24b

    • SHA256

      57eedd22106b0c148c6be833f6db510f1769338fb658407348ac067c4133514d

    • SHA512

      58e95403321fe525a86628c6a203c362f64e1429e5c4b3849326f2ea85d6ac96165194c7f2cb3ff0a2ac66f5eae743a7f1e2b75746a6405c17828b3634079f55

    • SSDEEP

      384:vvtIoZxrSniaXs+qx+bwqPX+VOcFd5fHq52lxjsUmhymdGUop5hY:vvQn4j+ZO5fKAlxo5s3UozO

    • Mirai

      Mirai is a prevalent Linux malware infecting exposed network devices.

    • Mirai family

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    • Enumerates running processes

      Discovers information about currently running processes on the system

    • Writes file to system bin folder

MITRE ATT&CK Enterprise v15

Tasks