General

  • Target

    1be305c089fa7aa88e967d7bc0ea4d7d76c07f879df2b3ee445dfaa0ccb8e8b8.elf

  • Size

    23KB

  • Sample

    250202-el7gdavjfw

  • MD5

    bc40ed039ebc37e909bf79dee3fc63dd

  • SHA1

    e13f7f6b07eed473ed707ead81336d09c174fe26

  • SHA256

    1be305c089fa7aa88e967d7bc0ea4d7d76c07f879df2b3ee445dfaa0ccb8e8b8

  • SHA512

    f3269464e6564dd52069a3b5a5ab032bc75cc3454e9c674fb0f1b5c25b279dbfd0bef8881324cd2018214eb27123d8806b42c2cd3d46d8290db004d9e0ff29e3

  • SSDEEP

    384:oeD8ZSH2LLZUYyGZbsOiTjYAxd7fqWVZfV/Pncb8Q3md9JgGlzDpH7uNj1JA4r:oeD8ZSWvZHZbs1UAxd7iEZ68Ei9JgGl6

Malware Config

Extracted

Family

mirai

Botnet

LZRD

Targets

    • Target

      1be305c089fa7aa88e967d7bc0ea4d7d76c07f879df2b3ee445dfaa0ccb8e8b8.elf

    • Size

      23KB

    • MD5

      bc40ed039ebc37e909bf79dee3fc63dd

    • SHA1

      e13f7f6b07eed473ed707ead81336d09c174fe26

    • SHA256

      1be305c089fa7aa88e967d7bc0ea4d7d76c07f879df2b3ee445dfaa0ccb8e8b8

    • SHA512

      f3269464e6564dd52069a3b5a5ab032bc75cc3454e9c674fb0f1b5c25b279dbfd0bef8881324cd2018214eb27123d8806b42c2cd3d46d8290db004d9e0ff29e3

    • SSDEEP

      384:oeD8ZSH2LLZUYyGZbsOiTjYAxd7fqWVZfV/Pncb8Q3md9JgGlzDpH7uNj1JA4r:oeD8ZSWvZHZbs1UAxd7iEZ68Ei9JgGl6

    • Mirai

      Mirai is a prevalent Linux malware infecting exposed network devices.

    • Mirai family

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    • Writes file to system bin folder

MITRE ATT&CK Enterprise v15

Tasks