General

  • Target

    Satan.arm7.elf

  • Size

    60KB

  • Sample

    241123-xsmdws1nfv

  • MD5

    26244c3ab68f37450765d949f5224e3f

  • SHA1

    49bdc89c4fbb2a708581c6bfb9d243f87f3a1ef2

  • SHA256

    7dd48ee3c78c19eadd688198321c42ceab0f2af5f24b3e45ca21cc2c57567beb

  • SHA512

    fccb71c39cdfab38d55fed2f67b68bb13947d4d81dcb51eb5d01d383f70e2061195142980752e9d596989176b686e4de5d23152c41e02e0e3d653da5ace7dd3b

  • SSDEEP

    1536:eyiqybiQVcnlJIrjhTjFV22QLvCXNv3k6nvrVBaEbA7:ef+GhT5LQL4Nc6vrVZbA7

Malware Config

Extracted

Family

mirai

Botnet

LZRD

Targets

    • Target

      Satan.arm7.elf

    • Size

      60KB

    • MD5

      26244c3ab68f37450765d949f5224e3f

    • SHA1

      49bdc89c4fbb2a708581c6bfb9d243f87f3a1ef2

    • SHA256

      7dd48ee3c78c19eadd688198321c42ceab0f2af5f24b3e45ca21cc2c57567beb

    • SHA512

      fccb71c39cdfab38d55fed2f67b68bb13947d4d81dcb51eb5d01d383f70e2061195142980752e9d596989176b686e4de5d23152c41e02e0e3d653da5ace7dd3b

    • SSDEEP

      1536:eyiqybiQVcnlJIrjhTjFV22QLvCXNv3k6nvrVBaEbA7:ef+GhT5LQL4Nc6vrVZbA7

    • Mirai

      Mirai is a prevalent Linux malware infecting exposed network devices.

    • Mirai family

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    • Enumerates running processes

      Discovers information about currently running processes on the system

    • Writes file to system bin folder

MITRE ATT&CK Enterprise v15

Tasks