General

  • Target

    ub8ehJSePAfc9FYqZIT6.arm.elf

  • Size

    38KB

  • Sample

    241223-c3wp4avlcq

  • MD5

    38b31980eb310cc5fbbacf74d7ae52a9

  • SHA1

    68dc66a26bca7f8a1f828df60675841cb35b84ed

  • SHA256

    819ab41f18fe457c53bcedeaafe5ecc4cb93cef4e235b5e3f0e82526987b2ca4

  • SHA512

    f7407cb81a41e516bbceec01618b5bb138fcfdb3d2d7d7158bc307b23a446ea4ff8e86917a399e78c5b1f1f6c80f7b9c0cdc779b4b4c21c0924e36b46ac715c0

  • SSDEEP

    768:MBKNWbxNdoZd64sVhUQX9bS9CL+v7TqvnGQre6warL5/+qEn9YOuRSs3UozOq:aQiDdY4hUQNb/yv72vnGFpaH5/qsPzOq

Malware Config

Extracted

Family

mirai

Botnet

LZRD

Targets

    • Target

      ub8ehJSePAfc9FYqZIT6.arm.elf

    • Size

      38KB

    • MD5

      38b31980eb310cc5fbbacf74d7ae52a9

    • SHA1

      68dc66a26bca7f8a1f828df60675841cb35b84ed

    • SHA256

      819ab41f18fe457c53bcedeaafe5ecc4cb93cef4e235b5e3f0e82526987b2ca4

    • SHA512

      f7407cb81a41e516bbceec01618b5bb138fcfdb3d2d7d7158bc307b23a446ea4ff8e86917a399e78c5b1f1f6c80f7b9c0cdc779b4b4c21c0924e36b46ac715c0

    • SSDEEP

      768:MBKNWbxNdoZd64sVhUQX9bS9CL+v7TqvnGQre6warL5/+qEn9YOuRSs3UozOq:aQiDdY4hUQNb/yv72vnGFpaH5/qsPzOq

    • Mirai

      Mirai is a prevalent Linux malware infecting exposed network devices.

    • Mirai family

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    • Enumerates running processes

      Discovers information about currently running processes on the system

    • Writes file to system bin folder

MITRE ATT&CK Enterprise v15

Tasks