General

  • Target

    ub8ehJSePAfc9FYqZIT6.mips.elf

  • Size

    27KB

  • Sample

    241202-alrnpsvjgn

  • MD5

    f43afab6ef81a2d16e324d4fe443ce68

  • SHA1

    21fa1cb8e027e3b00dcf6e7eda11108dab8383d6

  • SHA256

    6a27b0ad9aafa3dfe2757bfdbbfbc9f8c3a096167fe8754a82066db12081b395

  • SHA512

    352120f50e0771b84fd205f8d72b921161b2abdade2c4d831cbcaf90b19256ed26f465d3535408e35f210e57fbc8adf78a82c171a45ae2129fc8b5828bc12389

  • SSDEEP

    768:+jeoUBsec9GwPgD/ZzRD8QmP03uIJgGlzDpbuR1Jr:yeogsec9o/ZzZEc3rVJut

Malware Config

Extracted

Family

mirai

Botnet

LZRD

Targets

    • Target

      ub8ehJSePAfc9FYqZIT6.mips.elf

    • Size

      27KB

    • MD5

      f43afab6ef81a2d16e324d4fe443ce68

    • SHA1

      21fa1cb8e027e3b00dcf6e7eda11108dab8383d6

    • SHA256

      6a27b0ad9aafa3dfe2757bfdbbfbc9f8c3a096167fe8754a82066db12081b395

    • SHA512

      352120f50e0771b84fd205f8d72b921161b2abdade2c4d831cbcaf90b19256ed26f465d3535408e35f210e57fbc8adf78a82c171a45ae2129fc8b5828bc12389

    • SSDEEP

      768:+jeoUBsec9GwPgD/ZzRD8QmP03uIJgGlzDpbuR1Jr:yeogsec9o/ZzZEc3rVJut

    • Mirai

      Mirai is a prevalent Linux malware infecting exposed network devices.

    • Mirai family

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    • Enumerates running processes

      Discovers information about currently running processes on the system

    • Writes file to system bin folder

MITRE ATT&CK Enterprise v15

Tasks