General

  • Target

    ub8ehJSePAfc9FYqZIT6.arm6.elf

  • Size

    43KB

  • Sample

    250401-dj3vqsvlx6

  • MD5

    abf0186b9b344fc40987cf2de286f8a9

  • SHA1

    b733eb27e0cc054ad563e26f3c488856e7150819

  • SHA256

    09ce62e5d9f35770f86828d6950be8678a2ebb3a456da2a9e3039736dc731d7f

  • SHA512

    94d6d91a7cd5e361f1dd60f89cdb54ba0eed6cc4bcb8477ab4c79b6c24cac620d8b21fb076b11a82b50c84266f1e28285429a8fdf46db6b2ba5c0535b11faaa3

  • SSDEEP

    768:AH9ZzkLTpzLFBvV3TyB7jQAgIXIPxhtmb1jMh9q3UELD:yzkPJFf3ujQAtqbmbBMULD

Malware Config

Extracted

Family

mirai

Botnet

LZRD

Targets

    • Target

      ub8ehJSePAfc9FYqZIT6.arm6.elf

    • Size

      43KB

    • MD5

      abf0186b9b344fc40987cf2de286f8a9

    • SHA1

      b733eb27e0cc054ad563e26f3c488856e7150819

    • SHA256

      09ce62e5d9f35770f86828d6950be8678a2ebb3a456da2a9e3039736dc731d7f

    • SHA512

      94d6d91a7cd5e361f1dd60f89cdb54ba0eed6cc4bcb8477ab4c79b6c24cac620d8b21fb076b11a82b50c84266f1e28285429a8fdf46db6b2ba5c0535b11faaa3

    • SSDEEP

      768:AH9ZzkLTpzLFBvV3TyB7jQAgIXIPxhtmb1jMh9q3UELD:yzkPJFf3ujQAtqbmbBMULD

    • Mirai

      Mirai is a prevalent Linux malware infecting exposed network devices.

    • Mirai family

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    • Enumerates running processes

      Discovers information about currently running processes on the system

    • Writes file to system bin folder

MITRE ATT&CK Enterprise v15

Tasks