General

  • Target

    parm7.elf

  • Size

    57KB

  • Sample

    250414-yfvp6szjt4

  • MD5

    879d94931867f6e9995dbd791a5fbd2c

  • SHA1

    ed92c124ed262c8cdd23dc9b61befdeab0bbe2e5

  • SHA256

    d00cd2fe5bbe371d416c98a4f951bc8143ef701bab17e46a5ede39394dff83f3

  • SHA512

    5d68941edf6eae2ab17d9d8b70c92036dd0429a4d37ef9e804460a2538295d3b00219348112bb8d375a66a5c2529951c0de9886f5706c166334aa668f8d46c1b

  • SSDEEP

    1536:+PS4tGPvZTbcmT6mYK3m8JyxVLCYYH9rJ:+PltGHT6mYGmHLCYo9rJ

Malware Config

Extracted

Family

mirai

Botnet

MIRAI

Targets

    • Target

      parm7.elf

    • Size

      57KB

    • MD5

      879d94931867f6e9995dbd791a5fbd2c

    • SHA1

      ed92c124ed262c8cdd23dc9b61befdeab0bbe2e5

    • SHA256

      d00cd2fe5bbe371d416c98a4f951bc8143ef701bab17e46a5ede39394dff83f3

    • SHA512

      5d68941edf6eae2ab17d9d8b70c92036dd0429a4d37ef9e804460a2538295d3b00219348112bb8d375a66a5c2529951c0de9886f5706c166334aa668f8d46c1b

    • SSDEEP

      1536:+PS4tGPvZTbcmT6mYK3m8JyxVLCYYH9rJ:+PltGHT6mYGmHLCYo9rJ

    • Mirai

      Mirai is a prevalent Linux malware infecting exposed network devices.

    • Mirai family

    • Deletes itself

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

MITRE ATT&CK Enterprise v16

Tasks