General

  • Target

    a5d749a0cf0282f5bee6f72f5103e68e88b9fbd78127072d57fcd358d96d764b.elf

  • Size

    23KB

  • Sample

    250206-hwnnssxjas

  • MD5

    f82b15c91a7b7d3e5fa8f38bdd60d180

  • SHA1

    0c7fba84572a524817507c09fee9568c46f09b3b

  • SHA256

    a5d749a0cf0282f5bee6f72f5103e68e88b9fbd78127072d57fcd358d96d764b

  • SHA512

    51aca79a13d2a7eb0a63758cc0c332f7615615869f883d6e49733524e30f3034ea49f8d97f1526932f033f0a40142d1a76d834c5b46a8296dd42221853bdac40

  • SSDEEP

    384:sX9j2u1RkbbV2PLpF/Bq76yKRbm848Gs82/OOBu8FJgGlzDpH7uNj1Jb1:iqu1K6LpFgh8S4OOBRJgGlzDpbuR1Jx

Malware Config

Extracted

Family

mirai

Botnet

LZRD

Targets

    • Target

      a5d749a0cf0282f5bee6f72f5103e68e88b9fbd78127072d57fcd358d96d764b.elf

    • Size

      23KB

    • MD5

      f82b15c91a7b7d3e5fa8f38bdd60d180

    • SHA1

      0c7fba84572a524817507c09fee9568c46f09b3b

    • SHA256

      a5d749a0cf0282f5bee6f72f5103e68e88b9fbd78127072d57fcd358d96d764b

    • SHA512

      51aca79a13d2a7eb0a63758cc0c332f7615615869f883d6e49733524e30f3034ea49f8d97f1526932f033f0a40142d1a76d834c5b46a8296dd42221853bdac40

    • SSDEEP

      384:sX9j2u1RkbbV2PLpF/Bq76yKRbm848Gs82/OOBu8FJgGlzDpH7uNj1Jb1:iqu1K6LpFgh8S4OOBRJgGlzDpbuR1Jx

    • Mirai

      Mirai is a prevalent Linux malware infecting exposed network devices.

    • Mirai family

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    • Writes file to system bin folder

MITRE ATT&CK Enterprise v15

Tasks