General

  • Target

    pecga.arm.elf

  • Size

    74KB

  • Sample

    250116-w6vfzstndp

  • MD5

    f91e3c14222bfd58128d27ed3f60b184

  • SHA1

    2347163ad343503a90cd7d078accf85647f5e703

  • SHA256

    047279e4e9343f2920eec8759dfc329d56e5bd32c37a27d8fe618d320c5ba885

  • SHA512

    043a38197ab50efb346786e5f8451eb126aa3aece52d97f8279eb8701f6fb180a79ca2c046808fccbcf3da4f7acaaa75b3ef9941396f97c843ccd8603f96fda2

  • SSDEEP

    1536:ijdRLkyeqmpbUHmgy9ft5/VZrW4fmqdcvpWbdvrb:ijd+5F5/VPfm5B8rb

Malware Config

Extracted

Family

mirai

Botnet

UNSTABLE

Targets

    • Target

      pecga.arm.elf

    • Size

      74KB

    • MD5

      f91e3c14222bfd58128d27ed3f60b184

    • SHA1

      2347163ad343503a90cd7d078accf85647f5e703

    • SHA256

      047279e4e9343f2920eec8759dfc329d56e5bd32c37a27d8fe618d320c5ba885

    • SHA512

      043a38197ab50efb346786e5f8451eb126aa3aece52d97f8279eb8701f6fb180a79ca2c046808fccbcf3da4f7acaaa75b3ef9941396f97c843ccd8603f96fda2

    • SSDEEP

      1536:ijdRLkyeqmpbUHmgy9ft5/VZrW4fmqdcvpWbdvrb:ijd+5F5/VPfm5B8rb

    Score
    7/10
    • Deletes itself

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    • Writes file to system bin folder

MITRE ATT&CK Enterprise v15

Tasks