General

  • Target

    night.mpsl.elf

  • Size

    32KB

  • Sample

    250124-1xr2qaslan

  • MD5

    4bcf0c5a860d11b2d3603c81f5e3197a

  • SHA1

    c4874f566ce27bc51bf4ca5d02e76974c78d0e4a

  • SHA256

    093e666a0a89cffd8348a09338e4064047dcfb13f3f87ce617db8fcea9ded842

  • SHA512

    b5a32656abfafe10e496c40e20e553bf1135088069965c7b275f510077955de8547213b953953774e9f56e3be097a48a339bb59df9db63b550e6215262fa5997

  • SSDEEP

    768:Jkv6/rdegilpQrmxUV5mHlq17Mq05M/LGgIXemEBWzTWnb:9degilpQrmiVQlq1QAzG9XeFBWzIb

Malware Config

Extracted

Family

mirai

Botnet

LZRD

Targets

    • Target

      night.mpsl.elf

    • Size

      32KB

    • MD5

      4bcf0c5a860d11b2d3603c81f5e3197a

    • SHA1

      c4874f566ce27bc51bf4ca5d02e76974c78d0e4a

    • SHA256

      093e666a0a89cffd8348a09338e4064047dcfb13f3f87ce617db8fcea9ded842

    • SHA512

      b5a32656abfafe10e496c40e20e553bf1135088069965c7b275f510077955de8547213b953953774e9f56e3be097a48a339bb59df9db63b550e6215262fa5997

    • SSDEEP

      768:Jkv6/rdegilpQrmxUV5mHlq17Mq05M/LGgIXemEBWzTWnb:9degilpQrmiVQlq1QAzG9XeFBWzIb

    • Mirai

      Mirai is a prevalent Linux malware infecting exposed network devices.

    • Mirai family

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    • Writes file to system bin folder

MITRE ATT&CK Enterprise v15

Tasks