General

  • Target

    Space.x86.elf

  • Size

    37KB

  • Sample

    241207-v9en9ssnel

  • MD5

    aec405b96527fb13ac254737c4e99388

  • SHA1

    c6accf2fe5ead7e9eb8bfe46083c2c26c981a812

  • SHA256

    643028ebd06ad279eaec9747223df4f8f37f8ac25dad3836d5dab7ac06ddec25

  • SHA512

    cd83c16a621448a8a622987f99a4e21d12432eb7aee58354ca9ad076f2a5ed136e8726aca5ae6b759746cbd1a1f7b88ccc637b2a2a75249a954dba2fd791038c

  • SSDEEP

    768:dxaYe0syQ8V3uZJYDR+AGJyQlYuOwqakXzEp3Lj7GOJ0JnbcuyD7UrQRjw:CYgBe3uZgR+zZiw807j7GOCJnouy8ry0

Malware Config

Extracted

Family

mirai

Botnet

LZRD

Targets

    • Target

      Space.x86.elf

    • Size

      37KB

    • MD5

      aec405b96527fb13ac254737c4e99388

    • SHA1

      c6accf2fe5ead7e9eb8bfe46083c2c26c981a812

    • SHA256

      643028ebd06ad279eaec9747223df4f8f37f8ac25dad3836d5dab7ac06ddec25

    • SHA512

      cd83c16a621448a8a622987f99a4e21d12432eb7aee58354ca9ad076f2a5ed136e8726aca5ae6b759746cbd1a1f7b88ccc637b2a2a75249a954dba2fd791038c

    • SSDEEP

      768:dxaYe0syQ8V3uZJYDR+AGJyQlYuOwqakXzEp3Lj7GOJ0JnbcuyD7UrQRjw:CYgBe3uZgR+zZiw807j7GOCJnouy8ry0

    • Mirai

      Mirai is a prevalent Linux malware infecting exposed network devices.

    • Mirai family

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    • Enumerates running processes

      Discovers information about currently running processes on the system

    • Writes file to system bin folder

MITRE ATT&CK Enterprise v15

Tasks