General

  • Target

    ub8ehJSePAfc9FYqZIT6.arm.elf

  • Size

    38KB

  • Sample

    250401-dj36hasvcx

  • MD5

    74f2a71590cd7cd32974754b304cb291

  • SHA1

    4bf35e76d3744cf06cb90ef5bc7708961a9b136a

  • SHA256

    d0efd99ea597554e1e1505a8a1c54a2a72515983b159974898a9f9ab0568b72b

  • SHA512

    9e73f2f3f5659af662ae3ebd588df1749eb34210cb15e2351eb41468df43a0b467e60d6c42831688f9c3c461d87d5ee46ab170f0cca616fa800cf8e3eab41d10

  • SSDEEP

    768:CaVlhT1/12NhX33JRqFdHOyk9egvFq7VpE5RIpwHFc5dxx5HzQtQUSbOy6IcKhlT:DhT1/qn3JQduJekFqxa53HFc98QvOZRM

Malware Config

Extracted

Family

mirai

Botnet

LZRD

Targets

    • Target

      ub8ehJSePAfc9FYqZIT6.arm.elf

    • Size

      38KB

    • MD5

      74f2a71590cd7cd32974754b304cb291

    • SHA1

      4bf35e76d3744cf06cb90ef5bc7708961a9b136a

    • SHA256

      d0efd99ea597554e1e1505a8a1c54a2a72515983b159974898a9f9ab0568b72b

    • SHA512

      9e73f2f3f5659af662ae3ebd588df1749eb34210cb15e2351eb41468df43a0b467e60d6c42831688f9c3c461d87d5ee46ab170f0cca616fa800cf8e3eab41d10

    • SSDEEP

      768:CaVlhT1/12NhX33JRqFdHOyk9egvFq7VpE5RIpwHFc5dxx5HzQtQUSbOy6IcKhlT:DhT1/qn3JQduJekFqxa53HFc98QvOZRM

    • Mirai

      Mirai is a prevalent Linux malware infecting exposed network devices.

    • Mirai family

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    • Enumerates running processes

      Discovers information about currently running processes on the system

    • Writes file to system bin folder

MITRE ATT&CK Enterprise v15

Tasks