General

  • Target

    Satan.arm6.elf

  • Size

    43KB

  • Sample

    241123-ybsp1ssnex

  • MD5

    58547a61a8ad34a0e69573e12a56bc5f

  • SHA1

    4d9232993bdf468b1025af78d6d975d8ddd15234

  • SHA256

    3483982941be89334ca28c6dc294a7c12c49e1d42291430bfbd24dff3ad0456a

  • SHA512

    b7b83e62628e7b4586d43abf144f5098b72ad994c28bfedc8afd4b4e99ec4c1f4d315d533b899b19f25bbbefc7ebdc4e8c5153f5ffafa5ffcef0c7005120d5fe

  • SSDEEP

    768:kTZ4toDjBLyguMkAA9zwXWhkdspjKnIf4v1jwr3cCXlXgj9q3UELSm:cbhIaPEVxKgc1jq3cOgiLJ

Malware Config

Extracted

Family

mirai

Botnet

LZRD

Targets

    • Target

      Satan.arm6.elf

    • Size

      43KB

    • MD5

      58547a61a8ad34a0e69573e12a56bc5f

    • SHA1

      4d9232993bdf468b1025af78d6d975d8ddd15234

    • SHA256

      3483982941be89334ca28c6dc294a7c12c49e1d42291430bfbd24dff3ad0456a

    • SHA512

      b7b83e62628e7b4586d43abf144f5098b72ad994c28bfedc8afd4b4e99ec4c1f4d315d533b899b19f25bbbefc7ebdc4e8c5153f5ffafa5ffcef0c7005120d5fe

    • SSDEEP

      768:kTZ4toDjBLyguMkAA9zwXWhkdspjKnIf4v1jwr3cCXlXgj9q3UELSm:cbhIaPEVxKgc1jq3cOgiLJ

    • Mirai

      Mirai is a prevalent Linux malware infecting exposed network devices.

    • Mirai family

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    • Enumerates running processes

      Discovers information about currently running processes on the system

    • Writes file to system bin folder

MITRE ATT&CK Enterprise v15

Tasks