General

  • Target

    wind.mpsl.elf

  • Size

    28KB

  • Sample

    250102-3pzspszpdw

  • MD5

    8c75550d786b77cbd6126f52ff6f8ff7

  • SHA1

    2920bd07503926c516e85dc9a98b1b83f8083eea

  • SHA256

    a8930215628e0389114fe87a6fc5912bd12392c3107733643d3cfc853c542b81

  • SHA512

    950af43188f89a88529fd2e9a1083f8206db21def824d11fba815cc3306bfcd60a2582d0be268fc5fa0802447da830a3c0a2c494802c78c3e34a4fa0040e5a23

  • SSDEEP

    384:1mjOb/7xg3HAp0nwcOESKAhKDn459qfUscwA/75xPuC6DGCabvT95am2x/LmNbRj:aObTx2HrZOKAhn4UswxPu3GdZ5YZLSWO

Malware Config

Extracted

Family

mirai

Botnet

LZRD

Targets

    • Target

      wind.mpsl.elf

    • Size

      28KB

    • MD5

      8c75550d786b77cbd6126f52ff6f8ff7

    • SHA1

      2920bd07503926c516e85dc9a98b1b83f8083eea

    • SHA256

      a8930215628e0389114fe87a6fc5912bd12392c3107733643d3cfc853c542b81

    • SHA512

      950af43188f89a88529fd2e9a1083f8206db21def824d11fba815cc3306bfcd60a2582d0be268fc5fa0802447da830a3c0a2c494802c78c3e34a4fa0040e5a23

    • SSDEEP

      384:1mjOb/7xg3HAp0nwcOESKAhKDn459qfUscwA/75xPuC6DGCabvT95am2x/LmNbRj:aObTx2HrZOKAhn4UswxPu3GdZ5YZLSWO

    • Mirai

      Mirai is a prevalent Linux malware infecting exposed network devices.

    • Mirai family

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    • Writes file to system bin folder

MITRE ATT&CK Enterprise v15

Tasks