General

  • Target

    bc5f84d679f687f15ba970648580a3afe80fcfe692ca16fbfc46d51b0a131d97.elf

  • Size

    24KB

  • Sample

    250130-d3hznswpdn

  • MD5

    c112353eabcb7526f834db8d91c0b994

  • SHA1

    90adcd31707b33a90f2ea96edf7822f378a5125d

  • SHA256

    bc5f84d679f687f15ba970648580a3afe80fcfe692ca16fbfc46d51b0a131d97

  • SHA512

    1a237b720888e2a10fe6442c576b07f89fbd6d6950f599368fd5001797c2a687858d6c29cfd51b1a17b4ffbfdf799ecf0cd8a411ef1a6a24d85d26d9f384e55c

  • SSDEEP

    384:MnC8UIY/4avrc9rIM//deMzkOdbBWHGYH6wxwNjqJrZi+a1SqInAyznY3ad7Rz86:iC8JYgdJzk085DJrZS1BIPEadRo3WD

Malware Config

Extracted

Family

mirai

Botnet

LZRD

Targets

    • Target

      bc5f84d679f687f15ba970648580a3afe80fcfe692ca16fbfc46d51b0a131d97.elf

    • Size

      24KB

    • MD5

      c112353eabcb7526f834db8d91c0b994

    • SHA1

      90adcd31707b33a90f2ea96edf7822f378a5125d

    • SHA256

      bc5f84d679f687f15ba970648580a3afe80fcfe692ca16fbfc46d51b0a131d97

    • SHA512

      1a237b720888e2a10fe6442c576b07f89fbd6d6950f599368fd5001797c2a687858d6c29cfd51b1a17b4ffbfdf799ecf0cd8a411ef1a6a24d85d26d9f384e55c

    • SSDEEP

      384:MnC8UIY/4avrc9rIM//deMzkOdbBWHGYH6wxwNjqJrZi+a1SqInAyznY3ad7Rz86:iC8JYgdJzk085DJrZS1BIPEadRo3WD

    • Mirai

      Mirai is a prevalent Linux malware infecting exposed network devices.

    • Mirai family

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    • Writes file to system bin folder

MITRE ATT&CK Enterprise v15

Tasks