General

  • Target

    morte.arm7.elf

  • Size

    151KB

  • Sample

    250309-tmrvmsvvhs

  • MD5

    11f6f782b4b1c5d7d338bc4ed60b6d0e

  • SHA1

    adff5c5b2c268b0f0fb06f5bfa3b7f3cc783f350

  • SHA256

    2ec7cd7be9c21bafb69fbf40a9b1c7ac286337a1f8688a1e2ce621becd22bafa

  • SHA512

    648e8f9e08fd3a234e8b8a86c89bb827f3bdd1c129e31ec673bdc09081292477187fe0adb98147000e194aa5a44c28d346e274ebc1530289bd98f228d1bb8862

  • SSDEEP

    3072:hkWSzOByZZah9rq89iWsWNR3vvfDopM/RZmYot:zSziQZah9rqulR3vnspM/RZmVt

Malware Config

Extracted

Family

mirai

Botnet

LZRD

Targets

    • Target

      morte.arm7.elf

    • Size

      151KB

    • MD5

      11f6f782b4b1c5d7d338bc4ed60b6d0e

    • SHA1

      adff5c5b2c268b0f0fb06f5bfa3b7f3cc783f350

    • SHA256

      2ec7cd7be9c21bafb69fbf40a9b1c7ac286337a1f8688a1e2ce621becd22bafa

    • SHA512

      648e8f9e08fd3a234e8b8a86c89bb827f3bdd1c129e31ec673bdc09081292477187fe0adb98147000e194aa5a44c28d346e274ebc1530289bd98f228d1bb8862

    • SSDEEP

      3072:hkWSzOByZZah9rq89iWsWNR3vvfDopM/RZmYot:zSziQZah9rqulR3vnspM/RZmVt

    Score
    7/10
    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

MITRE ATT&CK Enterprise v15

Tasks