General

  • Target

    byte.mpsl.elf

  • Size

    106KB

  • Sample

    250116-fejmeasmg1

  • MD5

    9f633af26340c41a2c83991aaa2bde7b

  • SHA1

    5da88f9eb86ae8b08af2919562bd23a890f14491

  • SHA256

    7ad608b962bf416701237910ed46e71e4c5acae37f0c9c0c8e7ff29d07a9b0df

  • SHA512

    48716eca7e7b4328fc2328bff0607a5ec2817b4d87575c53e6557c34de8923524e866764519e284547f3a0212568f912e5ab4709c7b99c676f1a9dd71026f9ab

  • SSDEEP

    1536:jyuo5zfiQN84/eR+QMBpx5AJltiwsGZMaKVHM7l61d6Om2flDH:2uQzfiQNd6tcGCQ4Jm+1H

Malware Config

Extracted

Family

mirai

Botnet

LZRD

Targets

    • Target

      byte.mpsl.elf

    • Size

      106KB

    • MD5

      9f633af26340c41a2c83991aaa2bde7b

    • SHA1

      5da88f9eb86ae8b08af2919562bd23a890f14491

    • SHA256

      7ad608b962bf416701237910ed46e71e4c5acae37f0c9c0c8e7ff29d07a9b0df

    • SHA512

      48716eca7e7b4328fc2328bff0607a5ec2817b4d87575c53e6557c34de8923524e866764519e284547f3a0212568f912e5ab4709c7b99c676f1a9dd71026f9ab

    • SSDEEP

      1536:jyuo5zfiQN84/eR+QMBpx5AJltiwsGZMaKVHM7l61d6Om2flDH:2uQzfiQNd6tcGCQ4Jm+1H

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    • Enumerates running processes

      Discovers information about currently running processes on the system

MITRE ATT&CK Enterprise v15

Tasks