General

  • Target

    ub8ehJSePAfc9FYqZIT6.arm6.elf

  • Size

    43KB

  • Sample

    241223-ctklgatqgw

  • MD5

    a37c4a5c25acd02e2f6fe9786d35ae0d

  • SHA1

    2d01d5b06554f6025bb7dfea0155d3e33aa46ec2

  • SHA256

    de442c9360464682344a0e3c4b36c1a281b463359507d172a91df90fde65a654

  • SHA512

    821b6f88898e420319970c0d790610beaaa663d6a7ec03d85614c9be0700f0c07330c2fa7f5fb647077008e435e3074a72a83b2b68ac20b65dab59be72c1c607

  • SSDEEP

    768:oBZyKJoofyfTtMLfclRAAO+jVbumZnLM3XgcTaWS5HOFIvb19q3UELM:gbjjOAgfnLGRMOmjILM

Malware Config

Extracted

Family

mirai

Botnet

LZRD

Targets

    • Target

      ub8ehJSePAfc9FYqZIT6.arm6.elf

    • Size

      43KB

    • MD5

      a37c4a5c25acd02e2f6fe9786d35ae0d

    • SHA1

      2d01d5b06554f6025bb7dfea0155d3e33aa46ec2

    • SHA256

      de442c9360464682344a0e3c4b36c1a281b463359507d172a91df90fde65a654

    • SHA512

      821b6f88898e420319970c0d790610beaaa663d6a7ec03d85614c9be0700f0c07330c2fa7f5fb647077008e435e3074a72a83b2b68ac20b65dab59be72c1c607

    • SSDEEP

      768:oBZyKJoofyfTtMLfclRAAO+jVbumZnLM3XgcTaWS5HOFIvb19q3UELM:gbjjOAgfnLGRMOmjILM

    • Mirai

      Mirai is a prevalent Linux malware infecting exposed network devices.

    • Mirai family

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    • Enumerates running processes

      Discovers information about currently running processes on the system

    • Writes file to system bin folder

MITRE ATT&CK Enterprise v15

Tasks