General

  • Target

    1ee68c0f5d023a349094fc4aac6ddd1615171dc19f18441eb2f7e6f5450de443.elf

  • Size

    23KB

  • Sample

    250126-dqasjazlc1

  • MD5

    2286392807233007429f8bbf1132c145

  • SHA1

    3427999d5a575b5fbe7d15f9351784d7d7cc273e

  • SHA256

    1ee68c0f5d023a349094fc4aac6ddd1615171dc19f18441eb2f7e6f5450de443

  • SHA512

    9a40d02c766572a73de02b7bda56df96e46a8f11f78ba13196b66c8c406e9eab527c3a9851cbd720c165aa5ced2d62e06bd44bb413763b25660a9fa6a44a7da1

  • SSDEEP

    384:neD8ZSH2LLZUYyGZbsOiTrowSN9rnZMINlphQ/HYtuiwimdzJgGlzDpH7uNj1JAF:neD8ZSWvZHZbs1row697qohQvg9wiizh

Malware Config

Extracted

Family

mirai

Botnet

LZRD

Targets

    • Target

      1ee68c0f5d023a349094fc4aac6ddd1615171dc19f18441eb2f7e6f5450de443.elf

    • Size

      23KB

    • MD5

      2286392807233007429f8bbf1132c145

    • SHA1

      3427999d5a575b5fbe7d15f9351784d7d7cc273e

    • SHA256

      1ee68c0f5d023a349094fc4aac6ddd1615171dc19f18441eb2f7e6f5450de443

    • SHA512

      9a40d02c766572a73de02b7bda56df96e46a8f11f78ba13196b66c8c406e9eab527c3a9851cbd720c165aa5ced2d62e06bd44bb413763b25660a9fa6a44a7da1

    • SSDEEP

      384:neD8ZSH2LLZUYyGZbsOiTrowSN9rnZMINlphQ/HYtuiwimdzJgGlzDpH7uNj1JAF:neD8ZSWvZHZbs1row697qohQvg9wiizh

    • Mirai

      Mirai is a prevalent Linux malware infecting exposed network devices.

    • Mirai family

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    • Writes file to system bin folder

MITRE ATT&CK Enterprise v15

Tasks