General

  • Target

    wind.arm7.elf

  • Size

    45KB

  • Sample

    250102-eym89svrgj

  • MD5

    2783e361b89161f63de2ff6247a5a493

  • SHA1

    b870328c8f8a4a2be4f6d279d6c486400254ef73

  • SHA256

    7a15574774ebe273a94d072c3de699220e7b977e224fb50f172a95f8db07f768

  • SHA512

    694bb82129773ca4078106fe0096f5b7bda4389170cdd953307fe43b08cf765bb7d3b78b75214262ef4307e73a25ca1d479205773d0656840682f9ded33f6dd2

  • SSDEEP

    768:D/TYCoIxdEk+AxoTZAZHFeq8b36n29q3UELbUXfi6nVMQHI4vcGpv3:DECFd+A6YHAx6nbLRQZ3

Malware Config

Extracted

Family

mirai

Botnet

LZRD

Targets

    • Target

      wind.arm7.elf

    • Size

      45KB

    • MD5

      2783e361b89161f63de2ff6247a5a493

    • SHA1

      b870328c8f8a4a2be4f6d279d6c486400254ef73

    • SHA256

      7a15574774ebe273a94d072c3de699220e7b977e224fb50f172a95f8db07f768

    • SHA512

      694bb82129773ca4078106fe0096f5b7bda4389170cdd953307fe43b08cf765bb7d3b78b75214262ef4307e73a25ca1d479205773d0656840682f9ded33f6dd2

    • SSDEEP

      768:D/TYCoIxdEk+AxoTZAZHFeq8b36n29q3UELbUXfi6nVMQHI4vcGpv3:DECFd+A6YHAx6nbLRQZ3

    • Mirai

      Mirai is a prevalent Linux malware infecting exposed network devices.

    • Mirai family

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    • Writes file to system bin folder

MITRE ATT&CK Enterprise v15

Tasks