General

  • Target

    night.arm7.elf

  • Size

    53KB

  • Sample

    250124-1xr2qa1kcw

  • MD5

    68d3e9ef58cfb1d7e689bdce49e31953

  • SHA1

    84d91ca02345fa83c8e824dfd40ccaaf83bfe684

  • SHA256

    49e20218f66fdfe8386ae94486af7e5a3d053c01fc7a242ad018d987a67df02a

  • SHA512

    ba9d1853255b9261c9e5d76abb8fa0eee30dcd4b0adf8a189af6872711911ac3330ca0e0494586acd7205294986a90c5650a659cd6c337d100eba7b0a255acbf

  • SSDEEP

    768:SJRWBUhe0InSZiJCdfPGGOaVk/+wWpBeFPXDCAyeo0m9q3UELDLaMcOSmI3aar:S3WTvSpfZg+wWatzJye3LLRSmI3aar

Malware Config

Extracted

Family

mirai

Botnet

LZRD

Targets

    • Target

      night.arm7.elf

    • Size

      53KB

    • MD5

      68d3e9ef58cfb1d7e689bdce49e31953

    • SHA1

      84d91ca02345fa83c8e824dfd40ccaaf83bfe684

    • SHA256

      49e20218f66fdfe8386ae94486af7e5a3d053c01fc7a242ad018d987a67df02a

    • SHA512

      ba9d1853255b9261c9e5d76abb8fa0eee30dcd4b0adf8a189af6872711911ac3330ca0e0494586acd7205294986a90c5650a659cd6c337d100eba7b0a255acbf

    • SSDEEP

      768:SJRWBUhe0InSZiJCdfPGGOaVk/+wWpBeFPXDCAyeo0m9q3UELDLaMcOSmI3aar:S3WTvSpfZg+wWatzJye3LLRSmI3aar

    • Mirai

      Mirai is a prevalent Linux malware infecting exposed network devices.

    • Mirai family

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    • Writes file to system bin folder

MITRE ATT&CK Enterprise v15

Tasks