General

  • Target

    byte.arm7.elf

  • Size

    75KB

  • Sample

    241226-k56xvaskal

  • MD5

    90bd554fab4841989971c525d079acf2

  • SHA1

    293f70bf16a9ca84b9a5d267f73014d07f37155b

  • SHA256

    5bfc72fd7e64791623fa6ae178a75bfd00e6fa4480f78c09e851a47a499d7fc0

  • SHA512

    8bfdfa4df4f48773be7e8c66d24529560536a602ff918fc3c847436b0260d77d378e3a973c96ea5497d7697a866cc175eb2a5036a346eb4bc979fcaa3f23732b

  • SSDEEP

    1536:sh7Ny3WFKPlBeGsniiGrXFPO8XsxttzhXMnQk1n8uZY2CG6nH9I:i7pFGBeZahO88XtzhXMxnrYysdI

Malware Config

Extracted

Family

mirai

Botnet

LZRD

Targets

    • Target

      byte.arm7.elf

    • Size

      75KB

    • MD5

      90bd554fab4841989971c525d079acf2

    • SHA1

      293f70bf16a9ca84b9a5d267f73014d07f37155b

    • SHA256

      5bfc72fd7e64791623fa6ae178a75bfd00e6fa4480f78c09e851a47a499d7fc0

    • SHA512

      8bfdfa4df4f48773be7e8c66d24529560536a602ff918fc3c847436b0260d77d378e3a973c96ea5497d7697a866cc175eb2a5036a346eb4bc979fcaa3f23732b

    • SSDEEP

      1536:sh7Ny3WFKPlBeGsniiGrXFPO8XsxttzhXMnQk1n8uZY2CG6nH9I:i7pFGBeZahO88XtzhXMxnrYysdI

    • Mirai

      Mirai is a prevalent Linux malware infecting exposed network devices.

    • Mirai family

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    • Enumerates running processes

      Discovers information about currently running processes on the system

MITRE ATT&CK Enterprise v15

Tasks