General

  • Target

    ub8ehJSePAfc9FYqZIT6.arm6.elf

  • Size

    43KB

  • Sample

    241226-zvfegaznhp

  • MD5

    e93c4d4afb75bc0b947ad0ecfb31f4cd

  • SHA1

    5ce4e75e6e053bd2f754f5d21a40d4ab8d0eebc4

  • SHA256

    dbad09080055f65cf654a98bb734c0fc541b8a829be58dee564e681d39b11fec

  • SHA512

    b002ff40984a06178a1c1fda0b7d380e81ead35c3681c555bc0f4cba0276f205b79665a46942155b87bbc1a1079b912a5df7cd7dbdf6a196a22c6715fb636ff3

  • SSDEEP

    768:orZyKJoofyfTtMLfclRAAO+jVbumZnLM3XgcTaWS5HOFm1fKs9q3UEL+:KbjjOAgfnLGRMOISL+

Malware Config

Extracted

Family

mirai

Botnet

LZRD

Targets

    • Target

      ub8ehJSePAfc9FYqZIT6.arm6.elf

    • Size

      43KB

    • MD5

      e93c4d4afb75bc0b947ad0ecfb31f4cd

    • SHA1

      5ce4e75e6e053bd2f754f5d21a40d4ab8d0eebc4

    • SHA256

      dbad09080055f65cf654a98bb734c0fc541b8a829be58dee564e681d39b11fec

    • SHA512

      b002ff40984a06178a1c1fda0b7d380e81ead35c3681c555bc0f4cba0276f205b79665a46942155b87bbc1a1079b912a5df7cd7dbdf6a196a22c6715fb636ff3

    • SSDEEP

      768:orZyKJoofyfTtMLfclRAAO+jVbumZnLM3XgcTaWS5HOFm1fKs9q3UEL+:KbjjOAgfnLGRMOISL+

    • Mirai

      Mirai is a prevalent Linux malware infecting exposed network devices.

    • Mirai family

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    • Enumerates running processes

      Discovers information about currently running processes on the system

    • Writes file to system bin folder

MITRE ATT&CK Enterprise v15

Tasks