General

  • Target

    byte.mpsl.elf

  • Size

    106KB

  • Sample

    250116-hj7k5sylcq

  • MD5

    0f63f0a1140c72fcda6e8fed05dadbfe

  • SHA1

    d3a718f2a790d5cd37c3d5b46fe6899ce9a38651

  • SHA256

    5e579eab1ed72088e03bf1a462e9022551d463b42a40f12be45fc4451b5a4215

  • SHA512

    ff49fceaa5baa4fc1114291cccee87bd0571461a17375109ed6ed5edf3668a66ec93deb432507c91611cbe888158d381f9a20b9dca6af8b4b9d9a8163012cfbd

  • SSDEEP

    1536:jyuo5zfiQN84NeR+QMBpx5AJltiwsGZMaKVHM7l61d6Om2flDH:2uQzfiQNT6tcGCQ4Jm+1H

Malware Config

Extracted

Family

mirai

Botnet

LZRD

Targets

    • Target

      byte.mpsl.elf

    • Size

      106KB

    • MD5

      0f63f0a1140c72fcda6e8fed05dadbfe

    • SHA1

      d3a718f2a790d5cd37c3d5b46fe6899ce9a38651

    • SHA256

      5e579eab1ed72088e03bf1a462e9022551d463b42a40f12be45fc4451b5a4215

    • SHA512

      ff49fceaa5baa4fc1114291cccee87bd0571461a17375109ed6ed5edf3668a66ec93deb432507c91611cbe888158d381f9a20b9dca6af8b4b9d9a8163012cfbd

    • SSDEEP

      1536:jyuo5zfiQN84NeR+QMBpx5AJltiwsGZMaKVHM7l61d6Om2flDH:2uQzfiQNT6tcGCQ4Jm+1H

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    • Enumerates running processes

      Discovers information about currently running processes on the system

MITRE ATT&CK Enterprise v15

Tasks