General

  • Target

    SwiftSec.arm7.elf

  • Size

    45KB

  • Sample

    241203-kr5smatmbj

  • MD5

    dbe01cfbf5f013a47f419758fd921f7e

  • SHA1

    4b35862a0a6f0bf684534ba74e639c064f68b7a1

  • SHA256

    931be77e7c7b0aa1eb0228c83d52abe241ec9d65412545ec8abe94bb50a89e17

  • SHA512

    df569dbfb2d9bf4b57de93dbfadf13cf791144187de98a53b66d086be9d9b6889a7c901a89383cb96934e6efe550c7b7d1d7114ad7c4025b87d613778a40d394

  • SSDEEP

    768:gW2myW5zrY3m+KDOtELVpuyUEQNIM4ZktwkVlXFbkdzxll9q3UELMIk9r/e/lQMj:f7d5zrY3mVqtSEyUE0IM4Fk7FbkdzULV

Malware Config

Extracted

Family

mirai

Botnet

LZRD

Targets

    • Target

      SwiftSec.arm7.elf

    • Size

      45KB

    • MD5

      dbe01cfbf5f013a47f419758fd921f7e

    • SHA1

      4b35862a0a6f0bf684534ba74e639c064f68b7a1

    • SHA256

      931be77e7c7b0aa1eb0228c83d52abe241ec9d65412545ec8abe94bb50a89e17

    • SHA512

      df569dbfb2d9bf4b57de93dbfadf13cf791144187de98a53b66d086be9d9b6889a7c901a89383cb96934e6efe550c7b7d1d7114ad7c4025b87d613778a40d394

    • SSDEEP

      768:gW2myW5zrY3m+KDOtELVpuyUEQNIM4ZktwkVlXFbkdzxll9q3UELMIk9r/e/lQMj:f7d5zrY3mVqtSEyUE0IM4Fk7FbkdzULV

    • Mirai

      Mirai is a prevalent Linux malware infecting exposed network devices.

    • Mirai family

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    • Writes file to system bin folder

MITRE ATT&CK Enterprise v15

Tasks