General

  • Target

    ca058bb3d20578aedbae2fc4a4dab479e96cac00d6e879eacf30dbf0c9bc08ed.elf

  • Size

    31KB

  • Sample

    250130-d463wsxpaz

  • MD5

    3121b7d8112e6bbf273e7279ecb10d76

  • SHA1

    3d0698e163561c151067b22a272d7e301494ebd2

  • SHA256

    ca058bb3d20578aedbae2fc4a4dab479e96cac00d6e879eacf30dbf0c9bc08ed

  • SHA512

    b82d6e0d502f07c89bc5ccdc6741481a8a65b4658ce6b26d88b56724e43f2477b37fcea66e3b7f5a5f62cfd5a4d22533de1d48afa1a00b4fe381c505894776cd

  • SSDEEP

    768:LAGs1DDudwSC64ADv1pI0eijRiStR4p3UedT9ix07h:QjSJ9Bu05jRiSn4p3UedYOh

Malware Config

Extracted

Family

mirai

Botnet

LZRD

Targets

    • Target

      ca058bb3d20578aedbae2fc4a4dab479e96cac00d6e879eacf30dbf0c9bc08ed.elf

    • Size

      31KB

    • MD5

      3121b7d8112e6bbf273e7279ecb10d76

    • SHA1

      3d0698e163561c151067b22a272d7e301494ebd2

    • SHA256

      ca058bb3d20578aedbae2fc4a4dab479e96cac00d6e879eacf30dbf0c9bc08ed

    • SHA512

      b82d6e0d502f07c89bc5ccdc6741481a8a65b4658ce6b26d88b56724e43f2477b37fcea66e3b7f5a5f62cfd5a4d22533de1d48afa1a00b4fe381c505894776cd

    • SSDEEP

      768:LAGs1DDudwSC64ADv1pI0eijRiStR4p3UedT9ix07h:QjSJ9Bu05jRiSn4p3UedYOh

    • Mirai

      Mirai is a prevalent Linux malware infecting exposed network devices.

    • Mirai family

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    • Enumerates running processes

      Discovers information about currently running processes on the system

    • Writes file to system bin folder

MITRE ATT&CK Enterprise v15

Tasks