General

  • Target

    ub8ehJSePAfc9FYqZIT6.mpsl.elf

  • Size

    27KB

  • Sample

    241202-ahq8rstrfp

  • MD5

    86108d84221de5cef4d2d120732de912

  • SHA1

    27fc448684a6689876fb2c6cd3434803d79a0da1

  • SHA256

    e0770101e20cd8359ddb8c3544a6e00fdc425b8cce47bc286ff229be67398794

  • SHA512

    1b0bca4d301ab734110f23756e4338abda279da38abcf4110d185a05466adec377c7d45e1d694d3ee314e6f5fbacb4b4232fe1157472547534f0fd2d8bca8eb6

  • SSDEEP

    768:1BKqSsOWs+jpal7KCZZb6VIUVc87erbRqBIDKha4Wnj:fnztA7hZXg7AVPKc5j

Malware Config

Extracted

Family

mirai

Botnet

LZRD

Targets

    • Target

      ub8ehJSePAfc9FYqZIT6.mpsl.elf

    • Size

      27KB

    • MD5

      86108d84221de5cef4d2d120732de912

    • SHA1

      27fc448684a6689876fb2c6cd3434803d79a0da1

    • SHA256

      e0770101e20cd8359ddb8c3544a6e00fdc425b8cce47bc286ff229be67398794

    • SHA512

      1b0bca4d301ab734110f23756e4338abda279da38abcf4110d185a05466adec377c7d45e1d694d3ee314e6f5fbacb4b4232fe1157472547534f0fd2d8bca8eb6

    • SSDEEP

      768:1BKqSsOWs+jpal7KCZZb6VIUVc87erbRqBIDKha4Wnj:fnztA7hZXg7AVPKc5j

    • Mirai

      Mirai is a prevalent Linux malware infecting exposed network devices.

    • Mirai family

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    • Enumerates running processes

      Discovers information about currently running processes on the system

    • Writes file to system bin folder

MITRE ATT&CK Enterprise v15

Tasks