General

  • Target

    Space.arm7.elf

  • Size

    60KB

  • Sample

    241225-md8cpsskcr

  • MD5

    581d4c734cbbd63efe366dd2a9c2b313

  • SHA1

    1c783cdd78aedbc7dceba8fde931e628ac6af08e

  • SHA256

    23c755af25bd1583d921516e53cba4413cfb32af53fac18aff5e56f459897de1

  • SHA512

    da941205145bddddefbe8e2247c4fed69a48bc5005df0fe30bc9b7a84c28cd34f533594e0b7ec33093b5645a33b01d80b4be2d8dfed5e0a69c10ee95563385ee

  • SSDEEP

    1536:pVQSmwtMJXmejt3ILTM5Tfv83KJ2crl2EWc:pVywt8XZ+LgTX83KHl2EWc

Malware Config

Extracted

Family

mirai

Botnet

LZRD

Targets

    • Target

      Space.arm7.elf

    • Size

      60KB

    • MD5

      581d4c734cbbd63efe366dd2a9c2b313

    • SHA1

      1c783cdd78aedbc7dceba8fde931e628ac6af08e

    • SHA256

      23c755af25bd1583d921516e53cba4413cfb32af53fac18aff5e56f459897de1

    • SHA512

      da941205145bddddefbe8e2247c4fed69a48bc5005df0fe30bc9b7a84c28cd34f533594e0b7ec33093b5645a33b01d80b4be2d8dfed5e0a69c10ee95563385ee

    • SSDEEP

      1536:pVQSmwtMJXmejt3ILTM5Tfv83KJ2crl2EWc:pVywt8XZ+LgTX83KHl2EWc

    • Mirai

      Mirai is a prevalent Linux malware infecting exposed network devices.

    • Mirai family

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    • Enumerates running processes

      Discovers information about currently running processes on the system

    • Writes file to system bin folder

MITRE ATT&CK Enterprise v15

Tasks