General

  • Target

    83f48f0188466c6e5cd445e682626abde73f3287dd26d61f4a495075239c3802.elf

  • Size

    21KB

  • Sample

    250208-eepmzsvncn

  • MD5

    02e787a1b2adc3e9032c4398de1fbd7b

  • SHA1

    79635e6fcbd6ea3a795f7f0bfd869217bcf3e366

  • SHA256

    83f48f0188466c6e5cd445e682626abde73f3287dd26d61f4a495075239c3802

  • SHA512

    547986d94b0a6772f46dfe834342827e18eb0d35771edab9cbe7adcfc9324fc26393407e69f676d6bc7f8049b82571ebd9d7d6f943cb35f442845e3b5eb12187

  • SSDEEP

    384:vvtIoZxrSniaXs+qx+bwqPXFvFr3lpaxMD/mzJDI3DZx8qclpehymdGUop5ha:vvQn4j+PYzJDI3Mqmss3Uozc

Malware Config

Extracted

Family

mirai

Botnet

LZRD

Targets

    • Target

      83f48f0188466c6e5cd445e682626abde73f3287dd26d61f4a495075239c3802.elf

    • Size

      21KB

    • MD5

      02e787a1b2adc3e9032c4398de1fbd7b

    • SHA1

      79635e6fcbd6ea3a795f7f0bfd869217bcf3e366

    • SHA256

      83f48f0188466c6e5cd445e682626abde73f3287dd26d61f4a495075239c3802

    • SHA512

      547986d94b0a6772f46dfe834342827e18eb0d35771edab9cbe7adcfc9324fc26393407e69f676d6bc7f8049b82571ebd9d7d6f943cb35f442845e3b5eb12187

    • SSDEEP

      384:vvtIoZxrSniaXs+qx+bwqPXFvFr3lpaxMD/mzJDI3DZx8qclpehymdGUop5ha:vvQn4j+PYzJDI3Mqmss3Uozc

    • Mirai

      Mirai is a prevalent Linux malware infecting exposed network devices.

    • Mirai family

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    • Enumerates running processes

      Discovers information about currently running processes on the system

    • Writes file to system bin folder

MITRE ATT&CK Enterprise v15

Tasks