General

  • Target

    boooooos.arm7.elf

  • Size

    45KB

  • Sample

    250117-ngjzyswkcp

  • MD5

    e8a41dc58e963dfecad4fc9c3ff13fa9

  • SHA1

    b5afdbd857f25af31a29012d84a7d12e511c8a13

  • SHA256

    dbafac37299d30b6cd3a58a64a93e575cf8541b7c5934b8a82b8361d36c5f48c

  • SHA512

    001e2a251f1c2c91c85ba11fb0cda25f24feada7e3ce1dce7373885a1111842428a34f0faafdb3d38e4cc1909a49e86c9190f53b44a01525948d90e29724c947

  • SSDEEP

    768:452yn/yZu5Yx9xaQJnhSJ4YyR0tNTpg99q3UELz+aNfwN35kjQ9Go6zm7D8:45B/ux6QLLYBNhL6aNfwNmjQ9Go6zmP8

Malware Config

Extracted

Family

mirai

Botnet

LZRD

Targets

    • Target

      boooooos.arm7.elf

    • Size

      45KB

    • MD5

      e8a41dc58e963dfecad4fc9c3ff13fa9

    • SHA1

      b5afdbd857f25af31a29012d84a7d12e511c8a13

    • SHA256

      dbafac37299d30b6cd3a58a64a93e575cf8541b7c5934b8a82b8361d36c5f48c

    • SHA512

      001e2a251f1c2c91c85ba11fb0cda25f24feada7e3ce1dce7373885a1111842428a34f0faafdb3d38e4cc1909a49e86c9190f53b44a01525948d90e29724c947

    • SSDEEP

      768:452yn/yZu5Yx9xaQJnhSJ4YyR0tNTpg99q3UELz+aNfwN35kjQ9Go6zm7D8:45B/ux6QLLYBNhL6aNfwNmjQ9Go6zmP8

    • Mirai

      Mirai is a prevalent Linux malware infecting exposed network devices.

    • Mirai family

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    • Writes file to system bin folder

MITRE ATT&CK Enterprise v15

Tasks