General

  • Target

    byte.mpsl.elf

  • Size

    106KB

  • Sample

    250113-e2j11swjc1

  • MD5

    1f564b30f022bdd9ee2bd99a63179697

  • SHA1

    00ab81cb29ab37431c9625dd78a297d4a43507c0

  • SHA256

    b3088592e76ee79e6ac44d3c63c8b625f7078dcca0fe4db971685baed90bd45b

  • SHA512

    ef75496422446fdfefe157f9714aa3a4134c29413699818c1f5c81dfd4ee5395865f6b2130a3cf916eccf8967b6029fc58bee66e7bd538abb8849f5ec736289c

  • SSDEEP

    1536:EiuIJqfyQd84OB/Qc857JAZ559xWcfZcKalcMbl61d6kGGflDa:/ugqfyQdtu59jfpo4HGO1a

Malware Config

Extracted

Family

mirai

Botnet

LZRD

Targets

    • Target

      byte.mpsl.elf

    • Size

      106KB

    • MD5

      1f564b30f022bdd9ee2bd99a63179697

    • SHA1

      00ab81cb29ab37431c9625dd78a297d4a43507c0

    • SHA256

      b3088592e76ee79e6ac44d3c63c8b625f7078dcca0fe4db971685baed90bd45b

    • SHA512

      ef75496422446fdfefe157f9714aa3a4134c29413699818c1f5c81dfd4ee5395865f6b2130a3cf916eccf8967b6029fc58bee66e7bd538abb8849f5ec736289c

    • SSDEEP

      1536:EiuIJqfyQd84OB/Qc857JAZ559xWcfZcKalcMbl61d6kGGflDa:/ugqfyQdtu59jfpo4HGO1a

    Score
    7/10
    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

MITRE ATT&CK Enterprise v15

Tasks