General

  • Target

    ub8ehJSePAfc9FYqZIT6.arm6.elf

  • Size

    27KB

  • Sample

    241202-ahrjjayph1

  • MD5

    fc1dce392997d101b84a86de8f4b880e

  • SHA1

    1e52b9b55c0b2731295af3a7facd9a7a58c04dff

  • SHA256

    5ab05ea9b1d175410a793bb843e297fe612942ef77a339a9e14e730aa30bde71

  • SHA512

    020322f82cdb5d0356e32f8db8747cb13dcd218b36b52ddde7153a297d873173db363bdea534e5367e9749388ab6ebb93f3eb75acca2dc2b65a6cee6995d2406

  • SSDEEP

    384:MZ3f69/Vnbhf3CYt9pR8o9IPVQTJF8VnUMgzljqX8IK655HkPe2sh7qmdGUEpia6:MZINbj390U78uFzljq35D9q3UEL6

Malware Config

Extracted

Family

mirai

Botnet

LZRD

Targets

    • Target

      ub8ehJSePAfc9FYqZIT6.arm6.elf

    • Size

      27KB

    • MD5

      fc1dce392997d101b84a86de8f4b880e

    • SHA1

      1e52b9b55c0b2731295af3a7facd9a7a58c04dff

    • SHA256

      5ab05ea9b1d175410a793bb843e297fe612942ef77a339a9e14e730aa30bde71

    • SHA512

      020322f82cdb5d0356e32f8db8747cb13dcd218b36b52ddde7153a297d873173db363bdea534e5367e9749388ab6ebb93f3eb75acca2dc2b65a6cee6995d2406

    • SSDEEP

      384:MZ3f69/Vnbhf3CYt9pR8o9IPVQTJF8VnUMgzljqX8IK655HkPe2sh7qmdGUEpia6:MZINbj390U78uFzljq35D9q3UEL6

    • Mirai

      Mirai is a prevalent Linux malware infecting exposed network devices.

    • Mirai family

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    • Enumerates running processes

      Discovers information about currently running processes on the system

    • Writes file to system bin folder

MITRE ATT&CK Enterprise v15

Tasks