General

  • Target

    pmpsl.elf

  • Size

    36KB

  • Sample

    250414-yfvp6szjt6

  • MD5

    171afc0afd5d870ee3dea24e1b58a324

  • SHA1

    a8e5aef1e7e708d2168ef01a8bd818ac01fd9b89

  • SHA256

    20e6b63172def8524c738b72c46cab584f9ddd0b3a47b005538bd09ad16a7d45

  • SHA512

    8a8d13204734a7f3602976be6a911d8f9b56411a2ebbf29febd668b7590afcbcdbb6a6a9bd1698cf914fb2f46b66691d3be6690e00af9ab303d38f118c810ea9

  • SSDEEP

    768:Bcic7wjLhqi2dYMSqKmBIEw9q0R/2XDpb+SiXkPNWC:Wq4tcZBuXkW

Malware Config

Extracted

Family

mirai

Botnet

MIRAI

Targets

    • Target

      pmpsl.elf

    • Size

      36KB

    • MD5

      171afc0afd5d870ee3dea24e1b58a324

    • SHA1

      a8e5aef1e7e708d2168ef01a8bd818ac01fd9b89

    • SHA256

      20e6b63172def8524c738b72c46cab584f9ddd0b3a47b005538bd09ad16a7d45

    • SHA512

      8a8d13204734a7f3602976be6a911d8f9b56411a2ebbf29febd668b7590afcbcdbb6a6a9bd1698cf914fb2f46b66691d3be6690e00af9ab303d38f118c810ea9

    • SSDEEP

      768:Bcic7wjLhqi2dYMSqKmBIEw9q0R/2XDpb+SiXkPNWC:Wq4tcZBuXkW

    • Mirai

      Mirai is a prevalent Linux malware infecting exposed network devices.

    • Mirai family

    • Deletes itself

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

MITRE ATT&CK Enterprise v16

Tasks