General

  • Target

    17cd1a371051508c082dbbf1e23d04ebcc48f290e3b2c284c1db6bc45e1ba2d4.elf

  • Size

    45KB

  • Sample

    250126-dnwbfs1ner

  • MD5

    0a7877fdc4500098ddac8e6081ba8fe1

  • SHA1

    91540861b1c8be328fe3ab214dbc5bb83c8d2ecb

  • SHA256

    17cd1a371051508c082dbbf1e23d04ebcc48f290e3b2c284c1db6bc45e1ba2d4

  • SHA512

    3b9875d3e4b7d24283b5436c2c91d49159fe7f0eec9bd538fa4106dbf915126299436d50b99bd37c3a236be4c57cd875e7e2560a46706b16a84ad95f7352ffe1

  • SSDEEP

    768:5/TYCoIxdEk+AxoTZAZHFeq8b379q3UELbUXfi6nVMQHI4vcGpvB:5ECFd+A6YHAxaLRQZB

Malware Config

Extracted

Family

mirai

Botnet

LZRD

Targets

    • Target

      17cd1a371051508c082dbbf1e23d04ebcc48f290e3b2c284c1db6bc45e1ba2d4.elf

    • Size

      45KB

    • MD5

      0a7877fdc4500098ddac8e6081ba8fe1

    • SHA1

      91540861b1c8be328fe3ab214dbc5bb83c8d2ecb

    • SHA256

      17cd1a371051508c082dbbf1e23d04ebcc48f290e3b2c284c1db6bc45e1ba2d4

    • SHA512

      3b9875d3e4b7d24283b5436c2c91d49159fe7f0eec9bd538fa4106dbf915126299436d50b99bd37c3a236be4c57cd875e7e2560a46706b16a84ad95f7352ffe1

    • SSDEEP

      768:5/TYCoIxdEk+AxoTZAZHFeq8b379q3UELbUXfi6nVMQHI4vcGpvB:5ECFd+A6YHAxaLRQZB

    • Mirai

      Mirai is a prevalent Linux malware infecting exposed network devices.

    • Mirai family

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    • Writes file to system bin folder

MITRE ATT&CK Enterprise v15

Tasks