General

  • Target

    Satan.arm6.elf

  • Size

    43KB

  • Sample

    241115-2fx23ssph1

  • MD5

    8698bf9d899c64879deddf9d754d3bac

  • SHA1

    ca5978cd36092193718d4187508f938a0f58cc89

  • SHA256

    2f32504a6fbefcfc0aeeed989ad4c812ebe207a987e79a4c25e590abef89cd98

  • SHA512

    605330d6040cc04b1a0ce5d486145239da9eb5b3de7d59700802687b4cb853ed682f4e5d61f80fc29d21968d7f76ce982609575161beb79818a3ed0cc66597f2

  • SSDEEP

    768:EnZOKj8x/QSQ3y/4qFTOdeoJWBhdYnjWcBWDW4s5GyZDa6XX4WUDb9q3UELB:yXwQSYPqFHI8rOjBn4+9DXPLB

Malware Config

Extracted

Family

mirai

Botnet

LZRD

Targets

    • Target

      Satan.arm6.elf

    • Size

      43KB

    • MD5

      8698bf9d899c64879deddf9d754d3bac

    • SHA1

      ca5978cd36092193718d4187508f938a0f58cc89

    • SHA256

      2f32504a6fbefcfc0aeeed989ad4c812ebe207a987e79a4c25e590abef89cd98

    • SHA512

      605330d6040cc04b1a0ce5d486145239da9eb5b3de7d59700802687b4cb853ed682f4e5d61f80fc29d21968d7f76ce982609575161beb79818a3ed0cc66597f2

    • SSDEEP

      768:EnZOKj8x/QSQ3y/4qFTOdeoJWBhdYnjWcBWDW4s5GyZDa6XX4WUDb9q3UELB:yXwQSYPqFHI8rOjBn4+9DXPLB

    • Mirai

      Mirai is a prevalent Linux malware infecting exposed network devices.

    • Mirai family

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    • Enumerates running processes

      Discovers information about currently running processes on the system

    • Writes file to system bin folder

MITRE ATT&CK Enterprise v15

Tasks