General

  • Target

    15d40ed0493c13580466a1fcef9b098b01d14bfe1a22e16fe7b7657911cc458e.elf

  • Size

    45KB

  • Sample

    250206-gvzh8sxlen

  • MD5

    b498c4f1a5c5238d43c22a3fb371c986

  • SHA1

    a71c9f2a39b1922dcc8b3d079759ddc10142c18e

  • SHA256

    15d40ed0493c13580466a1fcef9b098b01d14bfe1a22e16fe7b7657911cc458e

  • SHA512

    097d629639f830484ea6cf176924401c25311e0fcff6d0a27dfe672d40606eb8ee51364e3e5a57d0588c0cf03bf9fa6931c1980eb531321533ac9c324e748133

  • SSDEEP

    768:pkkvEhUALr3fRyKbdPXNt5B4qCXGSG2dVUG809q3UEL/X4ezjo1GK63RrlLxSyBy:pkl1fNPXD4vXGSG2dMdL/Jjo7i1l9PRO

Malware Config

Extracted

Family

mirai

Botnet

LZRD

Targets

    • Target

      15d40ed0493c13580466a1fcef9b098b01d14bfe1a22e16fe7b7657911cc458e.elf

    • Size

      45KB

    • MD5

      b498c4f1a5c5238d43c22a3fb371c986

    • SHA1

      a71c9f2a39b1922dcc8b3d079759ddc10142c18e

    • SHA256

      15d40ed0493c13580466a1fcef9b098b01d14bfe1a22e16fe7b7657911cc458e

    • SHA512

      097d629639f830484ea6cf176924401c25311e0fcff6d0a27dfe672d40606eb8ee51364e3e5a57d0588c0cf03bf9fa6931c1980eb531321533ac9c324e748133

    • SSDEEP

      768:pkkvEhUALr3fRyKbdPXNt5B4qCXGSG2dVUG809q3UEL/X4ezjo1GK63RrlLxSyBy:pkl1fNPXD4vXGSG2dMdL/Jjo7i1l9PRO

    • Mirai

      Mirai is a prevalent Linux malware infecting exposed network devices.

    • Mirai family

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    • Enumerates running processes

      Discovers information about currently running processes on the system

    • Writes file to system bin folder

MITRE ATT&CK Enterprise v15

Tasks