General

  • Target

    zmap.arm7.elf

  • Size

    152KB

  • Sample

    241213-k971pstnbs

  • MD5

    9ce68a667c961a44758e17f18e39419d

  • SHA1

    94e93cd72a812771cb287774caec8db0620778a5

  • SHA256

    17d8a0966c1b3e904e9a38c0bc508575744fe2c83c0eced9ab9c1b78a4d2977d

  • SHA512

    1714462669e8ddb172e2f54b026c2044678916da69e9d8a247ec43806331c29296a800e7e7e0c1d557672bb2897490020072d006b8f0dd47f4708b2ec9a10f05

  • SSDEEP

    3072:gXNsG9xNku03aoanAE+zRzHnbNc57VMzzLSO4PFM/9h7TBA:gXNsiEuToanL+zRzHbNyYLS7dM/9Zy

Malware Config

Extracted

Family

mirai

Botnet

UNSTABLE

Targets

    • Target

      zmap.arm7.elf

    • Size

      152KB

    • MD5

      9ce68a667c961a44758e17f18e39419d

    • SHA1

      94e93cd72a812771cb287774caec8db0620778a5

    • SHA256

      17d8a0966c1b3e904e9a38c0bc508575744fe2c83c0eced9ab9c1b78a4d2977d

    • SHA512

      1714462669e8ddb172e2f54b026c2044678916da69e9d8a247ec43806331c29296a800e7e7e0c1d557672bb2897490020072d006b8f0dd47f4708b2ec9a10f05

    • SSDEEP

      3072:gXNsG9xNku03aoanAE+zRzHnbNc57VMzzLSO4PFM/9h7TBA:gXNsiEuToanL+zRzHbNyYLS7dM/9Zy

    Score
    7/10
    • Deletes itself

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    • Writes file to system bin folder

MITRE ATT&CK Enterprise v15

Tasks