General

  • Target

    byte.arm7.elf

  • Size

    164KB

  • Sample

    241227-plmr3svnbs

  • MD5

    0f04a53b4b4870c9b8d541a6f27631c0

  • SHA1

    1e83cbdd12395dcc9ad121ce594fb7051963a029

  • SHA256

    5da633f7a8255cbb98c8a7e20275283dfbd32e8caf222d8427ced92340a4fc0c

  • SHA512

    f39c883a0322f375d7c1525ac68eeec975964cf924e965b88ec8ccb1beadfb6a524d5b14c008b861224f64fddb2ed158d29eb52e2188d648be64cf058deebeef

  • SSDEEP

    3072:3UvDiabnHsGC3AalhgyCT6097HjvNMI41Mb+ewAM/9VYGbCo:3UvmabH4AalhgyCOo3N6Mb+eTM/9VYFo

Malware Config

Extracted

Family

mirai

Botnet

LZRD

Targets

    • Target

      byte.arm7.elf

    • Size

      164KB

    • MD5

      0f04a53b4b4870c9b8d541a6f27631c0

    • SHA1

      1e83cbdd12395dcc9ad121ce594fb7051963a029

    • SHA256

      5da633f7a8255cbb98c8a7e20275283dfbd32e8caf222d8427ced92340a4fc0c

    • SHA512

      f39c883a0322f375d7c1525ac68eeec975964cf924e965b88ec8ccb1beadfb6a524d5b14c008b861224f64fddb2ed158d29eb52e2188d648be64cf058deebeef

    • SSDEEP

      3072:3UvDiabnHsGC3AalhgyCT6097HjvNMI41Mb+ewAM/9VYGbCo:3UvmabH4AalhgyCOo3N6Mb+eTM/9VYFo

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    • Enumerates running processes

      Discovers information about currently running processes on the system

MITRE ATT&CK Enterprise v15

Tasks