General

  • Target

    b2e23a7a917ad138a9ecac2f67eb7271c689e235757eaa3a0bfccb6c9906bb12.elf

  • Size

    24KB

  • Sample

    250126-ejsv7ssphq

  • MD5

    8fa7c8951bae50c837a3b56a5b7a4a79

  • SHA1

    7f0cceddc614bf44787986848f2c277e7dd36c20

  • SHA256

    b2e23a7a917ad138a9ecac2f67eb7271c689e235757eaa3a0bfccb6c9906bb12

  • SHA512

    4c303c2f807a00e13a0eb6c1f18960aa79fe491982762df7d99879783e4a29b647f2669fa91431d919524c7c45bb9ab71c01a5c6fe9fc855f7c96915be9fea79

  • SSDEEP

    768:obrQlS07dEv0UXqUhvQE+CXQKMQKCXBp4zpZqSWvFX:4QlS07FUXqIYSXQKqugqN

Malware Config

Extracted

Family

mirai

Botnet

LZRD

Targets

    • Target

      b2e23a7a917ad138a9ecac2f67eb7271c689e235757eaa3a0bfccb6c9906bb12.elf

    • Size

      24KB

    • MD5

      8fa7c8951bae50c837a3b56a5b7a4a79

    • SHA1

      7f0cceddc614bf44787986848f2c277e7dd36c20

    • SHA256

      b2e23a7a917ad138a9ecac2f67eb7271c689e235757eaa3a0bfccb6c9906bb12

    • SHA512

      4c303c2f807a00e13a0eb6c1f18960aa79fe491982762df7d99879783e4a29b647f2669fa91431d919524c7c45bb9ab71c01a5c6fe9fc855f7c96915be9fea79

    • SSDEEP

      768:obrQlS07dEv0UXqUhvQE+CXQKMQKCXBp4zpZqSWvFX:4QlS07FUXqIYSXQKqugqN

    • Mirai

      Mirai is a prevalent Linux malware infecting exposed network devices.

    • Mirai family

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    • Writes file to system bin folder

MITRE ATT&CK Enterprise v15

Tasks