Analysis

  • max time kernel
    0s
  • platform
    debian-9_armhf
  • resource
    debian9-armhf-20240611-en
  • resource tags

    arch:armhfimage:debian9-armhf-20240611-enkernel:4.9.0-13-armmp-lpaelocale:en-usos:debian-9-armhfsystem
  • submitted
    09-12-2024 14:47

General

  • Target

    Space.arm5.elf

  • Size

    19KB

  • MD5

    1b465ba295cb942064613b68897c36b0

  • SHA1

    0217f2612c91d45f22f42241dd06e64250105e16

  • SHA256

    a9e0e0f22805a3119b81d8f6070f42613e63049b49480b9a592e82c6ed3ed72a

  • SHA512

    fc88ebf81137a3eb99049fc25373e7de7133f30da7a73c36fa7df20ec0875c059106a0a541b0ed6f9b3cc4a0b6cf3bb54a30b37de0266e14138797f783406fdb

  • SSDEEP

    384:d3meRngp8Bc8ZoScE5jrecZpuYdruCurHizh7qmdGUEpiaMyq:9RngbScMjre4pHdruCu09q3UEL/q

Score
10/10

Malware Config

Extracted

Family

mirai

Botnet

LZRD

Signatures

  • Mirai

    Mirai is a prevalent Linux malware infecting exposed network devices.

  • Mirai family

Processes

  • /tmp/Space.arm5.elf
    /tmp/Space.arm5.elf
    1⤵
      PID:669

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads