General

  • Target

    byte.mips.elf

  • Size

    117KB

  • Sample

    241213-k98l8swjen

  • MD5

    21cb220963a78fb1248b54aaa8436ad9

  • SHA1

    2b6939f4f160f730894eb46cd30c6dfd43cc5c73

  • SHA256

    eb52b30de09a45e5f476f759b879c4bf76d83408f98051862f32a49924e65a2a

  • SHA512

    47f9c131aea5eff3803052dbb7c4218b914e0997304c1fc9ab29c3ccad7c1f2e0de175aab6482dfdf23d27733eec7e8563070368656389dddf9fbbe3d0eacc67

  • SSDEEP

    1536:c7e+RDMIb5flkDQSbl5jRA/IajbkRSN2ofdC4V/Ie7pVpXBCl61d6/FN:J+aIb5fyj5ajbkRSN2ofxV/5BC4IFN

Malware Config

Extracted

Family

mirai

Botnet

LZRD

Targets

    • Target

      byte.mips.elf

    • Size

      117KB

    • MD5

      21cb220963a78fb1248b54aaa8436ad9

    • SHA1

      2b6939f4f160f730894eb46cd30c6dfd43cc5c73

    • SHA256

      eb52b30de09a45e5f476f759b879c4bf76d83408f98051862f32a49924e65a2a

    • SHA512

      47f9c131aea5eff3803052dbb7c4218b914e0997304c1fc9ab29c3ccad7c1f2e0de175aab6482dfdf23d27733eec7e8563070368656389dddf9fbbe3d0eacc67

    • SSDEEP

      1536:c7e+RDMIb5flkDQSbl5jRA/IajbkRSN2ofdC4V/Ie7pVpXBCl61d6/FN:J+aIb5fyj5ajbkRSN2ofxV/5BC4IFN

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    • Enumerates running processes

      Discovers information about currently running processes on the system

MITRE ATT&CK Enterprise v15

Tasks