Resubmissions

15-01-2025 15:21

250115-srs3tswpft 10

15-01-2025 14:48

250115-r6fwdaxlar 10

General

  • Target

    ub8ehJSePAfc9FYqZIT6.mpsl.elf

  • Size

    22KB

  • Sample

    250115-r6fwdaxlar

  • MD5

    08234ec1fab991b0c3763a6b4f73cab0

  • SHA1

    6f22b383ee3ca5e50f089224ce8d17f13c14caf8

  • SHA256

    9ddb0b6777a2b71e2faa2c63ec596fbedc1adfa55acc9bea30d2e1b5e92caeb1

  • SHA512

    f00748331b52ceda74d0961ca48bd0c57aeaa0a2e3391321fefcc68a1c9541eeca24b2a9a793648d185a44c90ce45f21b2c67250a381842390762fe19a052703

  • SSDEEP

    384:5vOFxqEIQqIedKKZ99UGJ3UZdo2/fwlj3tWRmYi4Fr3uORYdzRWGVCz0Nv9aI:ArpXq3McUjfXfwl8kYHJuOyd9WO

Malware Config

Extracted

Family

mirai

Botnet

LZRD

Targets

    • Target

      ub8ehJSePAfc9FYqZIT6.mpsl.elf

    • Size

      22KB

    • MD5

      08234ec1fab991b0c3763a6b4f73cab0

    • SHA1

      6f22b383ee3ca5e50f089224ce8d17f13c14caf8

    • SHA256

      9ddb0b6777a2b71e2faa2c63ec596fbedc1adfa55acc9bea30d2e1b5e92caeb1

    • SHA512

      f00748331b52ceda74d0961ca48bd0c57aeaa0a2e3391321fefcc68a1c9541eeca24b2a9a793648d185a44c90ce45f21b2c67250a381842390762fe19a052703

    • SSDEEP

      384:5vOFxqEIQqIedKKZ99UGJ3UZdo2/fwlj3tWRmYi4Fr3uORYdzRWGVCz0Nv9aI:ArpXq3McUjfXfwl8kYHJuOyd9WO

    • Mirai

      Mirai is a prevalent Linux malware infecting exposed network devices.

    • Mirai family

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    • Traces itself

      Traces itself to prevent debugging attempts

    • Writes file to system bin folder

MITRE ATT&CK Enterprise v15

Tasks