General

  • Target

    ub8ehJSePAfc9FYqZIT6.arm.elf

  • Size

    38KB

  • Sample

    250103-v397lavmgw

  • MD5

    382edb367d457557fbc1c4593bfe393f

  • SHA1

    7639eae0fb8d2523155572e721c9e003f9c83fb3

  • SHA256

    88652bbf95c9ef10f2a72c92d46096bd4d8605e77fbbffadf9d5dfc46e9a58e2

  • SHA512

    68f2998b3bf425fda1f24c8f6c7fb03be35702abc2e27bfbaa7e67be6d7f81e81ebb00d616d1bf6d43f346b5e92b9682a11ece99b040269707a24d9ab8028e9f

  • SSDEEP

    768:dBKNWbxNdoZd64sVhUQX9bS9CL+v7TqvnGQre6warL5/+qEn92a2gs3UozOx:rQiDdY4hUQNb/yv72vnGFpaH5/q0bzOx

Malware Config

Extracted

Family

mirai

Botnet

LZRD

Targets

    • Target

      ub8ehJSePAfc9FYqZIT6.arm.elf

    • Size

      38KB

    • MD5

      382edb367d457557fbc1c4593bfe393f

    • SHA1

      7639eae0fb8d2523155572e721c9e003f9c83fb3

    • SHA256

      88652bbf95c9ef10f2a72c92d46096bd4d8605e77fbbffadf9d5dfc46e9a58e2

    • SHA512

      68f2998b3bf425fda1f24c8f6c7fb03be35702abc2e27bfbaa7e67be6d7f81e81ebb00d616d1bf6d43f346b5e92b9682a11ece99b040269707a24d9ab8028e9f

    • SSDEEP

      768:dBKNWbxNdoZd64sVhUQX9bS9CL+v7TqvnGQre6warL5/+qEn92a2gs3UozOx:rQiDdY4hUQNb/yv72vnGFpaH5/q0bzOx

    • Mirai

      Mirai is a prevalent Linux malware infecting exposed network devices.

    • Mirai family

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    • Enumerates running processes

      Discovers information about currently running processes on the system

    • Writes file to system bin folder

MITRE ATT&CK Enterprise v15

Tasks