General

  • Target

    byte.arm7.elf

  • Size

    164KB

  • Sample

    250116-f5eq5svqfq

  • MD5

    264d6a037c20fae4556400afe0e6459a

  • SHA1

    41cae096d0484c7745acbbdc350c377045ec614c

  • SHA256

    98b2307793b57c4451aa0ce8b77aa933f704a2868bf280ed5a77e59fe5c23f84

  • SHA512

    d8f08d3fb24608a8d29c2abde7b45cef3cc56ed2cafb894ddbb053f5242c5fbc600cc053008718d3d9e75f974102fd41e928b3d516650cb5b84b1fce507bb3ba

  • SSDEEP

    3072:HUvDiabnHkiS3AalhgyCv/097HjvNMI4vM++ewAM/9lnVao:HUvmabHMAalhgyCHo3NsM++eTM/9ln4o

Malware Config

Extracted

Family

mirai

Botnet

LZRD

Targets

    • Target

      byte.arm7.elf

    • Size

      164KB

    • MD5

      264d6a037c20fae4556400afe0e6459a

    • SHA1

      41cae096d0484c7745acbbdc350c377045ec614c

    • SHA256

      98b2307793b57c4451aa0ce8b77aa933f704a2868bf280ed5a77e59fe5c23f84

    • SHA512

      d8f08d3fb24608a8d29c2abde7b45cef3cc56ed2cafb894ddbb053f5242c5fbc600cc053008718d3d9e75f974102fd41e928b3d516650cb5b84b1fce507bb3ba

    • SSDEEP

      3072:HUvDiabnHkiS3AalhgyCv/097HjvNMI4vM++ewAM/9lnVao:HUvmabHMAalhgyCHo3NsM++eTM/9ln4o

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    • Enumerates running processes

      Discovers information about currently running processes on the system

MITRE ATT&CK Enterprise v15

Tasks