General

  • Target

    camp.arm7.elf

  • Size

    60KB

  • Sample

    250113-17cd1syqcv

  • MD5

    a1d8acd50352d19c0b991bc9ae10ffa1

  • SHA1

    df680fe26cb56d44506355ff773f9aed9210d6e4

  • SHA256

    b74251b247b4b23a86f55e243d619c890271a60dc95fe292774da59ce9abcc8d

  • SHA512

    180b51edd2ccd594fd4b1a25b3d1ada3b555315291f9bb9cec59273dbcec13869d66357bf043285bb9c4963f41c3cecd19cd224db85009caa25f521fc7e44fea

  • SSDEEP

    1536:Y7XduYshWhq/HIEy6Og3Nwz9hAyoELSM5Tfv83KJGTb6R4k:qdpssMPR9w4yLLXTX83K0Tb6R3

Malware Config

Extracted

Family

mirai

Botnet

LZRD

Targets

    • Target

      camp.arm7.elf

    • Size

      60KB

    • MD5

      a1d8acd50352d19c0b991bc9ae10ffa1

    • SHA1

      df680fe26cb56d44506355ff773f9aed9210d6e4

    • SHA256

      b74251b247b4b23a86f55e243d619c890271a60dc95fe292774da59ce9abcc8d

    • SHA512

      180b51edd2ccd594fd4b1a25b3d1ada3b555315291f9bb9cec59273dbcec13869d66357bf043285bb9c4963f41c3cecd19cd224db85009caa25f521fc7e44fea

    • SSDEEP

      1536:Y7XduYshWhq/HIEy6Og3Nwz9hAyoELSM5Tfv83KJGTb6R4k:qdpssMPR9w4yLLXTX83K0Tb6R3

    • Mirai

      Mirai is a prevalent Linux malware infecting exposed network devices.

    • Mirai family

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    • Enumerates running processes

      Discovers information about currently running processes on the system

    • Writes file to system bin folder

MITRE ATT&CK Enterprise v15

Tasks