General

  • Target

    zmap.arm7.elf

  • Size

    152KB

  • Sample

    241102-r22maaxdjk

  • MD5

    093e778346d9c10ca1c5bbe123883ed8

  • SHA1

    ee38ec6c10dbe99c7c4565ea29e576126b24ed7e

  • SHA256

    26f03b1a5b496174d86c268023ab89bfa0ab5fdc593f96366be0b56e0de1bb34

  • SHA512

    e8e53d0a989afa9b901bf634c3c32ab6d525b06de30f03bdad2d3a201a1b87fc383a2cb6c2bba4edebfa5e2f39c36a6d7b55f9c50c12921125863bee47b0fe9e

  • SSDEEP

    3072:gXNsG9xNku0haoanAE+zRzHnbNc57VMz8LSO4PFM/9h7TBA:gXNsiEuNoanL+zRzHbNyzLS7dM/9Zy

Malware Config

Extracted

Family

mirai

Botnet

UNSTABLE

C2

server.myway-ing.win

Targets

    • Target

      zmap.arm7.elf

    • Size

      152KB

    • MD5

      093e778346d9c10ca1c5bbe123883ed8

    • SHA1

      ee38ec6c10dbe99c7c4565ea29e576126b24ed7e

    • SHA256

      26f03b1a5b496174d86c268023ab89bfa0ab5fdc593f96366be0b56e0de1bb34

    • SHA512

      e8e53d0a989afa9b901bf634c3c32ab6d525b06de30f03bdad2d3a201a1b87fc383a2cb6c2bba4edebfa5e2f39c36a6d7b55f9c50c12921125863bee47b0fe9e

    • SSDEEP

      3072:gXNsG9xNku0haoanAE+zRzHnbNc57VMz8LSO4PFM/9h7TBA:gXNsiEuNoanL+zRzHbNyzLS7dM/9Zy

    Score
    7/10
    • Deletes itself

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    • Writes file to system bin folder

MITRE ATT&CK Enterprise v15

Tasks