General

  • Target

    byte.mips.elf

  • Size

    104KB

  • Sample

    250116-gvavwaxjep

  • MD5

    6b0150484e7bb8058c837e361ba0043c

  • SHA1

    d1f03e8d2c30478eb705f619559d6bcb4dec0c02

  • SHA256

    4308c69fe16efb544f85ac3106fb307e500070198e6c4f5e8443958c2df993d2

  • SHA512

    78705e0bfef0f64339d07bdf9544316c89b8a79574fb8d0db6952080231190eca46f1158e6bc9f669f2eacf5ac2bd2504ec0c34b25aa823a4ae6b1fef5ae7d07

  • SSDEEP

    1536:IWSIYw56E7E/BO1bR3BjrxS7vEPGEsfrQ4R8eBdml61d6eqsn:SyvE/BO9/jrxS7vEPGEsfc4Rnm4Zqsn

Malware Config

Extracted

Family

mirai

Botnet

LZRD

Targets

    • Target

      byte.mips.elf

    • Size

      104KB

    • MD5

      6b0150484e7bb8058c837e361ba0043c

    • SHA1

      d1f03e8d2c30478eb705f619559d6bcb4dec0c02

    • SHA256

      4308c69fe16efb544f85ac3106fb307e500070198e6c4f5e8443958c2df993d2

    • SHA512

      78705e0bfef0f64339d07bdf9544316c89b8a79574fb8d0db6952080231190eca46f1158e6bc9f669f2eacf5ac2bd2504ec0c34b25aa823a4ae6b1fef5ae7d07

    • SSDEEP

      1536:IWSIYw56E7E/BO1bR3BjrxS7vEPGEsfrQ4R8eBdml61d6eqsn:SyvE/BO9/jrxS7vEPGEsfc4Rnm4Zqsn

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    • Enumerates running processes

      Discovers information about currently running processes on the system

MITRE ATT&CK Enterprise v15

Tasks