General

  • Target

    69c9f3c0414def57f9d08aece7eb2f4875d820acbbfb2f4c069846ac88582d43.elf

  • Size

    32KB

  • Sample

    250130-dq9xmawlbr

  • MD5

    6dd69ef4d1869886b99929a7f16c3a1d

  • SHA1

    00b374c67d6e6ceadfa18bd7aeaf65fb0840f486

  • SHA256

    69c9f3c0414def57f9d08aece7eb2f4875d820acbbfb2f4c069846ac88582d43

  • SHA512

    78f6d0c157f8bf790afd6cd94264acc0de839911ffc162c3b5f5ac02aea41933ec8eed843d58faf2da65f4f890e87718bff68ffeb3dc95dd15c815f23c8a2016

  • SSDEEP

    768:Jkv6/rdegilpQrmxUV5mHlq17Mq05M/LGgIXemEBWYcTWns:9degilpQrmiVQlq1QAzG9XeFBWYcIs

Malware Config

Extracted

Family

mirai

Botnet

LZRD

Targets

    • Target

      69c9f3c0414def57f9d08aece7eb2f4875d820acbbfb2f4c069846ac88582d43.elf

    • Size

      32KB

    • MD5

      6dd69ef4d1869886b99929a7f16c3a1d

    • SHA1

      00b374c67d6e6ceadfa18bd7aeaf65fb0840f486

    • SHA256

      69c9f3c0414def57f9d08aece7eb2f4875d820acbbfb2f4c069846ac88582d43

    • SHA512

      78f6d0c157f8bf790afd6cd94264acc0de839911ffc162c3b5f5ac02aea41933ec8eed843d58faf2da65f4f890e87718bff68ffeb3dc95dd15c815f23c8a2016

    • SSDEEP

      768:Jkv6/rdegilpQrmxUV5mHlq17Mq05M/LGgIXemEBWYcTWns:9degilpQrmiVQlq1QAzG9XeFBWYcIs

    • Mirai

      Mirai is a prevalent Linux malware infecting exposed network devices.

    • Mirai family

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    • Writes file to system bin folder

MITRE ATT&CK Enterprise v15

Tasks