General

  • Target

    d8f3b3cd5de4a9bfd20c3de51b11620399077c6b368e99229638f8c9f80bcf49.elf

  • Size

    20KB

  • Sample

    250126-emrgjssqgq

  • MD5

    fe554c823518892cc1b87337370a3211

  • SHA1

    b605736332547cf5a8e4a62c768e2f6ea2eaa765

  • SHA256

    d8f3b3cd5de4a9bfd20c3de51b11620399077c6b368e99229638f8c9f80bcf49

  • SHA512

    98882754405039d2d997bb82d733398cb85c38866eac26fe830a02d50e9f1319489e2940eed73f6c240430c8fdad98dc5a2f9be831a84a8813600785db327fc8

  • SSDEEP

    384:MgWLpj8s/qPui8uZxoIA57RWQjJiEVi+ZkXaQNAr8vcoBAvP+qNV+KLebRtYHSyI:O98o08kxofBE+ZkXaT47C2EpitYNI

Malware Config

Extracted

Family

mirai

Botnet

LZRD

Targets

    • Target

      d8f3b3cd5de4a9bfd20c3de51b11620399077c6b368e99229638f8c9f80bcf49.elf

    • Size

      20KB

    • MD5

      fe554c823518892cc1b87337370a3211

    • SHA1

      b605736332547cf5a8e4a62c768e2f6ea2eaa765

    • SHA256

      d8f3b3cd5de4a9bfd20c3de51b11620399077c6b368e99229638f8c9f80bcf49

    • SHA512

      98882754405039d2d997bb82d733398cb85c38866eac26fe830a02d50e9f1319489e2940eed73f6c240430c8fdad98dc5a2f9be831a84a8813600785db327fc8

    • SSDEEP

      384:MgWLpj8s/qPui8uZxoIA57RWQjJiEVi+ZkXaQNAr8vcoBAvP+qNV+KLebRtYHSyI:O98o08kxofBE+ZkXaT47C2EpitYNI

    • Mirai

      Mirai is a prevalent Linux malware infecting exposed network devices.

    • Mirai family

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    • Enumerates running processes

      Discovers information about currently running processes on the system

    • Writes file to system bin folder

MITRE ATT&CK Enterprise v15

Tasks