General

  • Target

    da5366e5a698f050642a22b543d8751f54fe48c8966c5ccfbe23b1ded59f53c0.elf

  • Size

    45KB

  • Sample

    250202-fpy5vaylgj

  • MD5

    f6ce271e39c00c15e61793cd37558e17

  • SHA1

    def693b1aab10d5d259cb331bdd1ecaa30655395

  • SHA256

    da5366e5a698f050642a22b543d8751f54fe48c8966c5ccfbe23b1ded59f53c0

  • SHA512

    33221d8ae78038933c13db14e37b773284fa1572ca516a119fdb9aba25c3b75580b877468863d3cf27d5c7fde07826a78995fc8ecf1d0e93c497074d6e728919

  • SSDEEP

    768:r/TYCoIxdEIZUy9xs/Q7ha7Shi4Njd7HIP9q3UELbUXfi6nVMQHI4vcGpvy:rECFay9xs4NaGi4j0+LRQZy

Malware Config

Extracted

Family

mirai

Botnet

LZRD

Targets

    • Target

      da5366e5a698f050642a22b543d8751f54fe48c8966c5ccfbe23b1ded59f53c0.elf

    • Size

      45KB

    • MD5

      f6ce271e39c00c15e61793cd37558e17

    • SHA1

      def693b1aab10d5d259cb331bdd1ecaa30655395

    • SHA256

      da5366e5a698f050642a22b543d8751f54fe48c8966c5ccfbe23b1ded59f53c0

    • SHA512

      33221d8ae78038933c13db14e37b773284fa1572ca516a119fdb9aba25c3b75580b877468863d3cf27d5c7fde07826a78995fc8ecf1d0e93c497074d6e728919

    • SSDEEP

      768:r/TYCoIxdEIZUy9xs/Q7ha7Shi4Njd7HIP9q3UELbUXfi6nVMQHI4vcGpvy:rECFay9xs4NaGi4j0+LRQZy

    • Mirai

      Mirai is a prevalent Linux malware infecting exposed network devices.

    • Mirai family

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    • Writes file to system bin folder

MITRE ATT&CK Enterprise v15

Tasks