General

  • Target

    Space.arm6.elf

  • Size

    43KB

  • Sample

    241209-r5vcdawlbq

  • MD5

    4261c2e7d0781b1c4a8f7b7a525ef5d7

  • SHA1

    c2a1092a433f1bb101ed780d5d03b73454b87245

  • SHA256

    183a21f14c90f057e0350c39f65a76a55fe76482e7d0b69c9fcafee27d068abb

  • SHA512

    28de68b4d0d64d1a9057afa8d18069b5ebe39e161e0e8766f05693be8ad0d0ea7cdd07a1670d253bcf288ba0e38ad5ce886bc8abb41a98db0b8c5490ab81b152

  • SSDEEP

    768:orZyKJoofyfTtMLfclRAAO+jVbumZnLM3XgcTaWS5HOFfW7ZhP9q3UEL/:KbjjOAgfnLGRMOEr+L/

Malware Config

Extracted

Family

mirai

Botnet

LZRD

Targets

    • Target

      Space.arm6.elf

    • Size

      43KB

    • MD5

      4261c2e7d0781b1c4a8f7b7a525ef5d7

    • SHA1

      c2a1092a433f1bb101ed780d5d03b73454b87245

    • SHA256

      183a21f14c90f057e0350c39f65a76a55fe76482e7d0b69c9fcafee27d068abb

    • SHA512

      28de68b4d0d64d1a9057afa8d18069b5ebe39e161e0e8766f05693be8ad0d0ea7cdd07a1670d253bcf288ba0e38ad5ce886bc8abb41a98db0b8c5490ab81b152

    • SSDEEP

      768:orZyKJoofyfTtMLfclRAAO+jVbumZnLM3XgcTaWS5HOFfW7ZhP9q3UEL/:KbjjOAgfnLGRMOEr+L/

    • Mirai

      Mirai is a prevalent Linux malware infecting exposed network devices.

    • Mirai family

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    • Enumerates running processes

      Discovers information about currently running processes on the system

    • Writes file to system bin folder

MITRE ATT&CK Enterprise v15

Tasks