General

  • Target

    ub8ehJSePAfc9FYqZIT6.arm7.elf

  • Size

    60KB

  • Sample

    241113-janbks1jbm

  • MD5

    e094e9341984f1cc61db673bfc442569

  • SHA1

    0e640634450980e357c00823820bfc39e66197c1

  • SHA256

    62a0d867d512cb705692e121924e25eeba12d2a3e79ac01251b62db2217a759c

  • SHA512

    9df6c463ceaafe5e86b470698d61a5ddd6dbc59b41438633d7e9b1b9d20c3da3f3cfaf3be31bb84825efacd92cf6fdb8a0da93ee3fc5185606538140c715f3e1

  • SSDEEP

    1536:zVQSmwtMJXmejtQGMBLTM5Tfv83KJ2crl2EW3:zVywt8XZKGMBLgTX83KHl2EW3

Malware Config

Extracted

Family

mirai

Botnet

LZRD

Targets

    • Target

      ub8ehJSePAfc9FYqZIT6.arm7.elf

    • Size

      60KB

    • MD5

      e094e9341984f1cc61db673bfc442569

    • SHA1

      0e640634450980e357c00823820bfc39e66197c1

    • SHA256

      62a0d867d512cb705692e121924e25eeba12d2a3e79ac01251b62db2217a759c

    • SHA512

      9df6c463ceaafe5e86b470698d61a5ddd6dbc59b41438633d7e9b1b9d20c3da3f3cfaf3be31bb84825efacd92cf6fdb8a0da93ee3fc5185606538140c715f3e1

    • SSDEEP

      1536:zVQSmwtMJXmejtQGMBLTM5Tfv83KJ2crl2EW3:zVywt8XZKGMBLgTX83KHl2EW3

    • Mirai

      Mirai is a prevalent Linux malware infecting exposed network devices.

    • Mirai family

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    • Enumerates running processes

      Discovers information about currently running processes on the system

    • Writes file to system bin folder

MITRE ATT&CK Enterprise v15

Tasks