General

  • Target

    Space.x86_64.elf

  • Size

    36KB

  • Sample

    241225-md8ngasjcz

  • MD5

    2a970c08a36bf8f55635f35c36450c39

  • SHA1

    19178136051ca912cb63f3b660aaff2ad1a0acf2

  • SHA256

    24e0c293e85e159f78622bfd49323ffeeae27d8714a4763599eca3d9f0db3979

  • SHA512

    671d7a2cce48f7d3716d53b7c4bd365aeba2972101935aa2b5d5f637a7b888caf0e138db9c52c2a0a4e7359eb9909c04563110bc9db9110c8b649c9b9d63039f

  • SSDEEP

    768:F+4qtvWUAASje6lhaVG5CHb4diYjLMWf5CcWHdbL5fPr8J75Wx0S:A9tvWrASje4wVGigJmFL578J7AD

Malware Config

Extracted

Family

mirai

Botnet

LZRD

Targets

    • Target

      Space.x86_64.elf

    • Size

      36KB

    • MD5

      2a970c08a36bf8f55635f35c36450c39

    • SHA1

      19178136051ca912cb63f3b660aaff2ad1a0acf2

    • SHA256

      24e0c293e85e159f78622bfd49323ffeeae27d8714a4763599eca3d9f0db3979

    • SHA512

      671d7a2cce48f7d3716d53b7c4bd365aeba2972101935aa2b5d5f637a7b888caf0e138db9c52c2a0a4e7359eb9909c04563110bc9db9110c8b649c9b9d63039f

    • SSDEEP

      768:F+4qtvWUAASje6lhaVG5CHb4diYjLMWf5CcWHdbL5fPr8J75Wx0S:A9tvWrASje4wVGigJmFL578J7AD

    • Mirai

      Mirai is a prevalent Linux malware infecting exposed network devices.

    • Mirai family

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    • Enumerates running processes

      Discovers information about currently running processes on the system

    • Writes file to system bin folder

MITRE ATT&CK Enterprise v15

Tasks