General

  • Target

    byte.arm5.elf

  • Size

    44KB

  • Sample

    241226-k56l3s1qa1

  • MD5

    f165746e8de7cdc0fa16481d510a2be6

  • SHA1

    488fdf89f700da37888baa4a38442a7817bb82f2

  • SHA256

    cd328409653b8bd3123a29504c1195dd3b557c02e944fb7266b5ec063c9f820f

  • SHA512

    e59db812eaf71e932a2ab70d15b1cfa5cfdac72eb419d4a33c78b2b88fa8b4ddd6e8e899091b50940196d8e6da3017ce274f019ec428c5dcea6f0473bcf56e75

  • SSDEEP

    768:yOZuPmRa6EAaO6BWeWEM5Sa2Nz8713kn4nWInItcfZ73QboQ1bjwKQMPe6EB6MLU:DZuPAa6PaO6ulsHJ85UnT+Iy7AJhlQXO

Malware Config

Extracted

Family

mirai

Botnet

LZRD

Targets

    • Target

      byte.arm5.elf

    • Size

      44KB

    • MD5

      f165746e8de7cdc0fa16481d510a2be6

    • SHA1

      488fdf89f700da37888baa4a38442a7817bb82f2

    • SHA256

      cd328409653b8bd3123a29504c1195dd3b557c02e944fb7266b5ec063c9f820f

    • SHA512

      e59db812eaf71e932a2ab70d15b1cfa5cfdac72eb419d4a33c78b2b88fa8b4ddd6e8e899091b50940196d8e6da3017ce274f019ec428c5dcea6f0473bcf56e75

    • SSDEEP

      768:yOZuPmRa6EAaO6BWeWEM5Sa2Nz8713kn4nWInItcfZ73QboQ1bjwKQMPe6EB6MLU:DZuPAa6PaO6ulsHJ85UnT+Iy7AJhlQXO

    • Mirai

      Mirai is a prevalent Linux malware infecting exposed network devices.

    • Mirai family

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    • Enumerates running processes

      Discovers information about currently running processes on the system

MITRE ATT&CK Enterprise v15

Tasks