General

  • Target

    ub8ehJSePAfc9FYqZIT6.x86_64.elf

  • Size

    36KB

  • Sample

    250401-dj3vqsvlx3

  • MD5

    bd2e05897033fc35109d20da6c3771b0

  • SHA1

    42ad14dbd0fbecefa36e311cf079df742a314caa

  • SHA256

    4572a23b7279591e36420a39899e63b236eab041e317a94a16dda43e4f2b36fa

  • SHA512

    883fbc08403223ddf2679a356ac526bc2d6c46dc342ba2650a4dc7b892db8179e2cafdced709df48c5a5ff03bbd43d5ad1316285706816a69260ed3e54aead08

  • SSDEEP

    768:u+4qtvWUAASUOJCQ28QG4CSXLCDjU2ejus6Rg8eU8CWx0L:t9tvWrASUOJZS2jUiRgjUEC

Malware Config

Extracted

Family

mirai

Botnet

LZRD

Targets

    • Target

      ub8ehJSePAfc9FYqZIT6.x86_64.elf

    • Size

      36KB

    • MD5

      bd2e05897033fc35109d20da6c3771b0

    • SHA1

      42ad14dbd0fbecefa36e311cf079df742a314caa

    • SHA256

      4572a23b7279591e36420a39899e63b236eab041e317a94a16dda43e4f2b36fa

    • SHA512

      883fbc08403223ddf2679a356ac526bc2d6c46dc342ba2650a4dc7b892db8179e2cafdced709df48c5a5ff03bbd43d5ad1316285706816a69260ed3e54aead08

    • SSDEEP

      768:u+4qtvWUAASUOJCQ28QG4CSXLCDjU2ejus6Rg8eU8CWx0L:t9tvWrASUOJZS2jUiRgjUEC

    • Mirai

      Mirai is a prevalent Linux malware infecting exposed network devices.

    • Mirai family

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    • Enumerates running processes

      Discovers information about currently running processes on the system

    • Writes file to system bin folder

MITRE ATT&CK Enterprise v15

Tasks