General

  • Target

    52cb4ae51f95198c9e4ba8f27366c72b27d5d1f759a3235ac578d9ad0cdd1b40.elf

  • Size

    45KB

  • Sample

    250130-dmdd9axjbv

  • MD5

    2535d0ba29f1ba80df0e2358fbf3322d

  • SHA1

    c3abc6119a0d947d1597d46d01638799bc603a74

  • SHA256

    52cb4ae51f95198c9e4ba8f27366c72b27d5d1f759a3235ac578d9ad0cdd1b40

  • SHA512

    b0572e2fc5e36fb374e5c81d6aa61d19d65f9b78f0027ee107ffbb1613653acb73f0ffc275c275333cfeb14e8593aa8e804c56d877cf40f73e7b4e81a705dbbe

  • SSDEEP

    768:ap/KgJ62FIp5Ydq19552zXvIqhUvjMVcitdljLaBulp99q3UELiX4ezjo1GK63RJ:alKgM2s2a95ozwPjccMjGBunQLiJjo7Q

Malware Config

Extracted

Family

mirai

Botnet

LZRD

Targets

    • Target

      52cb4ae51f95198c9e4ba8f27366c72b27d5d1f759a3235ac578d9ad0cdd1b40.elf

    • Size

      45KB

    • MD5

      2535d0ba29f1ba80df0e2358fbf3322d

    • SHA1

      c3abc6119a0d947d1597d46d01638799bc603a74

    • SHA256

      52cb4ae51f95198c9e4ba8f27366c72b27d5d1f759a3235ac578d9ad0cdd1b40

    • SHA512

      b0572e2fc5e36fb374e5c81d6aa61d19d65f9b78f0027ee107ffbb1613653acb73f0ffc275c275333cfeb14e8593aa8e804c56d877cf40f73e7b4e81a705dbbe

    • SSDEEP

      768:ap/KgJ62FIp5Ydq19552zXvIqhUvjMVcitdljLaBulp99q3UELiX4ezjo1GK63RJ:alKgM2s2a95ozwPjccMjGBunQLiJjo7Q

    • Mirai

      Mirai is a prevalent Linux malware infecting exposed network devices.

    • Mirai family

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    • Writes file to system bin folder

MITRE ATT&CK Enterprise v15

Tasks