General

  • Target

    cb4255c05917626e7855d9214d3d023cd02257893388fa3acb70c2392aeec400.elf

  • Size

    45KB

  • Sample

    250126-ekkwzssqbn

  • MD5

    99e90ead98720d05415d5f26a5149396

  • SHA1

    8839063c1ca002534c3ae02b352ae336dd1d9e63

  • SHA256

    cb4255c05917626e7855d9214d3d023cd02257893388fa3acb70c2392aeec400

  • SHA512

    79e7654f5cd04b438323ac05b72d8a745f4061c6060b3dadc8a4ac80c3a8cc41d178dba3ad7cee2f90989bea8c929bf8166d76c99b1a7f8905094e9a26f4d0d7

  • SSDEEP

    768:S/TYCoIxdEk+AxoTZAZHFeq8b3B39q3UELbUXfi6nVMQHI4vcGpvh:SECFd+A6YHAxwLRQZh

Malware Config

Extracted

Family

mirai

Botnet

LZRD

Targets

    • Target

      cb4255c05917626e7855d9214d3d023cd02257893388fa3acb70c2392aeec400.elf

    • Size

      45KB

    • MD5

      99e90ead98720d05415d5f26a5149396

    • SHA1

      8839063c1ca002534c3ae02b352ae336dd1d9e63

    • SHA256

      cb4255c05917626e7855d9214d3d023cd02257893388fa3acb70c2392aeec400

    • SHA512

      79e7654f5cd04b438323ac05b72d8a745f4061c6060b3dadc8a4ac80c3a8cc41d178dba3ad7cee2f90989bea8c929bf8166d76c99b1a7f8905094e9a26f4d0d7

    • SSDEEP

      768:S/TYCoIxdEk+AxoTZAZHFeq8b3B39q3UELbUXfi6nVMQHI4vcGpvh:SECFd+A6YHAxwLRQZh

    • Mirai

      Mirai is a prevalent Linux malware infecting exposed network devices.

    • Mirai family

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    • Enumerates running processes

      Discovers information about currently running processes on the system

    • Writes file to system bin folder

MITRE ATT&CK Enterprise v15

Tasks