General

  • Target

    byte.arm.elf

  • Size

    95KB

  • Sample

    241213-lffvsstpev

  • MD5

    fe363139daa12950984a8648357bc40c

  • SHA1

    918ca2cfa82a85a7efc5e18a2621c988a3432632

  • SHA256

    1f0c30f8bd1a58d40375d4f35df1373dde52f04d26151d0ee6da9f71a8e5b8fa

  • SHA512

    b84a0983294352a8d2d018ae168d4300930b659e124c0fcd464fbb45d2ea3e45038f27754dc04d503669a7b2e7383d6b3d839b20db8e0c9afd2b920f01659166

  • SSDEEP

    1536:YWw2Gf7XL1OyEr0dQys019mjmgeKpQiYF9+4WYZrvJl61d6dI:3w207XLW01wSgeKEzrJ4eI

Malware Config

Extracted

Family

mirai

Botnet

LZRD

Targets

    • Target

      byte.arm.elf

    • Size

      95KB

    • MD5

      fe363139daa12950984a8648357bc40c

    • SHA1

      918ca2cfa82a85a7efc5e18a2621c988a3432632

    • SHA256

      1f0c30f8bd1a58d40375d4f35df1373dde52f04d26151d0ee6da9f71a8e5b8fa

    • SHA512

      b84a0983294352a8d2d018ae168d4300930b659e124c0fcd464fbb45d2ea3e45038f27754dc04d503669a7b2e7383d6b3d839b20db8e0c9afd2b920f01659166

    • SSDEEP

      1536:YWw2Gf7XL1OyEr0dQys019mjmgeKpQiYF9+4WYZrvJl61d6dI:3w207XLW01wSgeKEzrJ4eI

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    • Enumerates running processes

      Discovers information about currently running processes on the system

MITRE ATT&CK Enterprise v15

Tasks