General

  • Target

    wind.mpsl.elf

  • Size

    28KB

  • Sample

    250106-h1hncazlfx

  • MD5

    3ac46e031468e3a1b61d989c248fc64b

  • SHA1

    67599ad4682f2948c9c329ed7e8b75777a74e1bd

  • SHA256

    a45e443726e3f25bae098ce7de31366afb803070e5579eb66fe0017cdac2e863

  • SHA512

    f95c38eb8309720c4a2cf0941be79ccbe38091a4afa5576447ab4b118fa1b46bce48bf29ff60380e0e5cfe24053b632344bf219375af5ac586e8c989891424c0

  • SSDEEP

    384:1mjOb/7xg3HAp0nwcOESKAhKDn459qfUscwA/75xPuC6DGCabvT95am2xVfRWGVK:aObTx2HrZOKAhn4UswxPu3GdZ5YZWB

Malware Config

Extracted

Family

mirai

Botnet

LZRD

Targets

    • Target

      wind.mpsl.elf

    • Size

      28KB

    • MD5

      3ac46e031468e3a1b61d989c248fc64b

    • SHA1

      67599ad4682f2948c9c329ed7e8b75777a74e1bd

    • SHA256

      a45e443726e3f25bae098ce7de31366afb803070e5579eb66fe0017cdac2e863

    • SHA512

      f95c38eb8309720c4a2cf0941be79ccbe38091a4afa5576447ab4b118fa1b46bce48bf29ff60380e0e5cfe24053b632344bf219375af5ac586e8c989891424c0

    • SSDEEP

      384:1mjOb/7xg3HAp0nwcOESKAhKDn459qfUscwA/75xPuC6DGCabvT95am2xVfRWGVK:aObTx2HrZOKAhn4UswxPu3GdZ5YZWB

    • Mirai

      Mirai is a prevalent Linux malware infecting exposed network devices.

    • Mirai family

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    • Writes file to system bin folder

MITRE ATT&CK Enterprise v15

Tasks