General

  • Target

    ub8ehJSePAfc9FYqZIT6.arm.elf

  • Size

    38KB

  • Sample

    241226-zvf11azpal

  • MD5

    e0c0d19a4e54978a5d766894aed0c473

  • SHA1

    2db6a835ac248b7dde0e963484fc97230b8351a8

  • SHA256

    929b9d19457940ed3056d8c5e69dc97af4354e231fa3d648a3d5ba6c8e34599a

  • SHA512

    3cc7e2b567c69367a78df345023c5e4a20a433eaa04d0fa8048cd040cade2ab3899be79269540ae483f87f7bb240322691684434b64c67a4cb669262a1dd6adc

  • SSDEEP

    768:OBKNWbxNdoZd64sVhUQX9bS9CL+v7TqvnGQre6warL5/+qEn9LKBbs3UozOg:QQiDdY4hUQNb/yv72vnGFpaH5/qVsGzr

Malware Config

Extracted

Family

mirai

Botnet

LZRD

Targets

    • Target

      ub8ehJSePAfc9FYqZIT6.arm.elf

    • Size

      38KB

    • MD5

      e0c0d19a4e54978a5d766894aed0c473

    • SHA1

      2db6a835ac248b7dde0e963484fc97230b8351a8

    • SHA256

      929b9d19457940ed3056d8c5e69dc97af4354e231fa3d648a3d5ba6c8e34599a

    • SHA512

      3cc7e2b567c69367a78df345023c5e4a20a433eaa04d0fa8048cd040cade2ab3899be79269540ae483f87f7bb240322691684434b64c67a4cb669262a1dd6adc

    • SSDEEP

      768:OBKNWbxNdoZd64sVhUQX9bS9CL+v7TqvnGQre6warL5/+qEn9LKBbs3UozOg:QQiDdY4hUQNb/yv72vnGFpaH5/qVsGzr

    • Mirai

      Mirai is a prevalent Linux malware infecting exposed network devices.

    • Mirai family

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    • Enumerates running processes

      Discovers information about currently running processes on the system

    • Writes file to system bin folder

MITRE ATT&CK Enterprise v15

Tasks