General

  • Target

    zmap.mpsl.elf

  • Size

    94KB

  • Sample

    241213-lc1e2awkdp

  • MD5

    6dd88d3cb7fd5c97613e45ebc74c179a

  • SHA1

    142e4ffc1514defb6570b1ace6873150b8b1b49f

  • SHA256

    465331679afc39cc65da28a8dbfeaacca7f260c7420116f37edd98df7ab03880

  • SHA512

    471384785e5bd904d99b503ed0bf1171584f51a5bb5155b72728627a5d1fce71722ef99743f0b31ea1f0a308ade8ff5f07a40cec042aeccfc6334831eb01d230

  • SSDEEP

    1536:IIdgIHlIodXYtZ7eLM/eNLNnCt2ZIzAFy4JZ1BV6I5W/CD:IIdgIHlIoSmLNCt2ZPFbJrYKD

Malware Config

Extracted

Family

mirai

Botnet

UNSTABLE

Targets

    • Target

      zmap.mpsl.elf

    • Size

      94KB

    • MD5

      6dd88d3cb7fd5c97613e45ebc74c179a

    • SHA1

      142e4ffc1514defb6570b1ace6873150b8b1b49f

    • SHA256

      465331679afc39cc65da28a8dbfeaacca7f260c7420116f37edd98df7ab03880

    • SHA512

      471384785e5bd904d99b503ed0bf1171584f51a5bb5155b72728627a5d1fce71722ef99743f0b31ea1f0a308ade8ff5f07a40cec042aeccfc6334831eb01d230

    • SSDEEP

      1536:IIdgIHlIodXYtZ7eLM/eNLNnCt2ZIzAFy4JZ1BV6I5W/CD:IIdgIHlIoSmLNCt2ZPFbJrYKD

    Score
    7/10
    • Deletes itself

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    • Writes file to system bin folder

MITRE ATT&CK Enterprise v15

Tasks