General

  • Target

    arm.elf

  • Size

    21KB

  • Sample

    250102-at2tmssrf1

  • MD5

    1f5ed7a68ba3d85e1f6f5a58cdcfd64d

  • SHA1

    693c7de4aea5da8815a5da4895b98ef01139b785

  • SHA256

    8055d1057bf9d9a21d73508a236484597e40bc0d12a78a1c3dcde8695f196c55

  • SHA512

    66e61df6dfe5db8a49ae6c541b5cc006781e794a273a932e25cb5ceaebe0d67463d5091bab8f692a16330638dc5124bb6bccf1adcccbc50be896fa2dc8307704

  • SSDEEP

    384:vvtIoZxrSniaXs+qx+bwqPX+VOcFd5fHq52lxjFRhymdGUop5hK:vvQn4j+ZO5fKAlxJRs3Uozo

Malware Config

Extracted

Family

mirai

Botnet

LZRD

Targets

    • Target

      arm.elf

    • Size

      21KB

    • MD5

      1f5ed7a68ba3d85e1f6f5a58cdcfd64d

    • SHA1

      693c7de4aea5da8815a5da4895b98ef01139b785

    • SHA256

      8055d1057bf9d9a21d73508a236484597e40bc0d12a78a1c3dcde8695f196c55

    • SHA512

      66e61df6dfe5db8a49ae6c541b5cc006781e794a273a932e25cb5ceaebe0d67463d5091bab8f692a16330638dc5124bb6bccf1adcccbc50be896fa2dc8307704

    • SSDEEP

      384:vvtIoZxrSniaXs+qx+bwqPX+VOcFd5fHq52lxjFRhymdGUop5hK:vvQn4j+ZO5fKAlxJRs3Uozo

    • Mirai

      Mirai is a prevalent Linux malware infecting exposed network devices.

    • Mirai family

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    • Enumerates running processes

      Discovers information about currently running processes on the system

    • Writes file to system bin folder

MITRE ATT&CK Enterprise v15

Tasks