General

  • Target

    Space.arm7.elf

  • Size

    60KB

  • Sample

    241216-jqd3va1mdw

  • MD5

    2a3fee148c081e6d892f579b9638706a

  • SHA1

    f3e6164b6ecbc7c2ae1a56a4f85b66c93b050d62

  • SHA256

    e17eae56011f4f12044a1df31c1245b95ebfb01caf39fc9758f49594c1165cad

  • SHA512

    e8131117e17ac3913d8ce91f662dca1eca10a7965e204177c0b031ad10b62482c2fa00dc7e1d47d65f3d2cb6851c6541774cd626f7d89c9097fba5309fcd013d

  • SSDEEP

    1536:mVQgIB+iQv0pfhr5T3e2trLNM5Tfv83KJJSFkd:mVIB+iQv0pfbTO2trLeTX83Kckd

Malware Config

Extracted

Family

mirai

Botnet

LZRD

Targets

    • Target

      Space.arm7.elf

    • Size

      60KB

    • MD5

      2a3fee148c081e6d892f579b9638706a

    • SHA1

      f3e6164b6ecbc7c2ae1a56a4f85b66c93b050d62

    • SHA256

      e17eae56011f4f12044a1df31c1245b95ebfb01caf39fc9758f49594c1165cad

    • SHA512

      e8131117e17ac3913d8ce91f662dca1eca10a7965e204177c0b031ad10b62482c2fa00dc7e1d47d65f3d2cb6851c6541774cd626f7d89c9097fba5309fcd013d

    • SSDEEP

      1536:mVQgIB+iQv0pfhr5T3e2trLNM5Tfv83KJJSFkd:mVIB+iQv0pfbTO2trLeTX83Kckd

    • Mirai

      Mirai is a prevalent Linux malware infecting exposed network devices.

    • Mirai family

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    • Enumerates running processes

      Discovers information about currently running processes on the system

    • Writes file to system bin folder

MITRE ATT&CK Enterprise v15

Tasks