General

  • Target

    ub8ehJSePAfc9FYqZIT6.arm7.elf

  • Size

    60KB

  • Sample

    241202-ytc3aazpdw

  • MD5

    fe3ab6691370dd39bb43d6042a5942ea

  • SHA1

    33461dde5d55acbff1a2b6aca41a557cbec9e391

  • SHA256

    f7524125f35d2ff9db5373a68ff710dc773ce75e45d882d2d31bc5a3bac730d9

  • SHA512

    dc39095931dff3f3f0bc96834a1c0b11ee5cce2b52fa0560ab51f970e75a53ee404a200526a4517a81cd07f72c9620f45e65918c94ff100cdcfa08a7eabb164a

  • SSDEEP

    1536:17XduYshWhq/HIEy6Og3Nwz9hAyYOPLSM5Tfv83KJGTb6R4w:xdpssMPR9w4yYOPLXTX83K0Tb6RX

Malware Config

Extracted

Family

mirai

Botnet

LZRD

Targets

    • Target

      ub8ehJSePAfc9FYqZIT6.arm7.elf

    • Size

      60KB

    • MD5

      fe3ab6691370dd39bb43d6042a5942ea

    • SHA1

      33461dde5d55acbff1a2b6aca41a557cbec9e391

    • SHA256

      f7524125f35d2ff9db5373a68ff710dc773ce75e45d882d2d31bc5a3bac730d9

    • SHA512

      dc39095931dff3f3f0bc96834a1c0b11ee5cce2b52fa0560ab51f970e75a53ee404a200526a4517a81cd07f72c9620f45e65918c94ff100cdcfa08a7eabb164a

    • SSDEEP

      1536:17XduYshWhq/HIEy6Og3Nwz9hAyYOPLSM5Tfv83KJGTb6R4w:xdpssMPR9w4yYOPLXTX83K0Tb6RX

    • Mirai

      Mirai is a prevalent Linux malware infecting exposed network devices.

    • Mirai family

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    • Enumerates running processes

      Discovers information about currently running processes on the system

    • Writes file to system bin folder

MITRE ATT&CK Enterprise v15

Tasks