General
-
Target
Space.arm7.elf
-
Size
60KB
-
Sample
241225-md8cpsskcr
-
MD5
581d4c734cbbd63efe366dd2a9c2b313
-
SHA1
1c783cdd78aedbc7dceba8fde931e628ac6af08e
-
SHA256
23c755af25bd1583d921516e53cba4413cfb32af53fac18aff5e56f459897de1
-
SHA512
da941205145bddddefbe8e2247c4fed69a48bc5005df0fe30bc9b7a84c28cd34f533594e0b7ec33093b5645a33b01d80b4be2d8dfed5e0a69c10ee95563385ee
-
SSDEEP
1536:pVQSmwtMJXmejt3ILTM5Tfv83KJ2crl2EWc:pVywt8XZ+LgTX83KHl2EWc
Behavioral task
behavioral1
Sample
Space.arm7.elf
Resource
debian12-armhf-20240221-en
Malware Config
Extracted
mirai
LZRD
Targets
-
-
Target
Space.arm7.elf
-
Size
60KB
-
MD5
581d4c734cbbd63efe366dd2a9c2b313
-
SHA1
1c783cdd78aedbc7dceba8fde931e628ac6af08e
-
SHA256
23c755af25bd1583d921516e53cba4413cfb32af53fac18aff5e56f459897de1
-
SHA512
da941205145bddddefbe8e2247c4fed69a48bc5005df0fe30bc9b7a84c28cd34f533594e0b7ec33093b5645a33b01d80b4be2d8dfed5e0a69c10ee95563385ee
-
SSDEEP
1536:pVQSmwtMJXmejt3ILTM5Tfv83KJ2crl2EWc:pVywt8XZ+LgTX83KHl2EWc
Score10/10-
Mirai family
-
Modifies Watchdog functionality
Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.
-
Enumerates running processes
Discovers information about currently running processes on the system
-
Writes file to system bin folder
-