General

  • Target

    Space.arm6.elf

  • Size

    43KB

  • Sample

    241225-md8ngaskdj

  • MD5

    2a439612d6e2ab17b57e852c9dc9f8f1

  • SHA1

    b8d4282fd83e9439ac664a879a87d892592befd5

  • SHA256

    14cda25625d15478439287d983927cb1796fdd8de8e20ae1152f4892c2f989eb

  • SHA512

    5bc6fa7cdf7d6a9ed6b3550f9022a700d941e4354fea53dd9bff92978ebcb3d37b371f3797957e57c6329bbaa97ef5e7b4f62244329b2a8dcea9d5a4fe91068f

  • SSDEEP

    768:ocZOKj8x/QSQ3y/4qFTOdeoJWBhdYnjWcBWDW4s5GyZDa6XX44R9q3UELw:jXwQSYPqFHI8rOjBn4+9DXnELw

Malware Config

Extracted

Family

mirai

Botnet

LZRD

Targets

    • Target

      Space.arm6.elf

    • Size

      43KB

    • MD5

      2a439612d6e2ab17b57e852c9dc9f8f1

    • SHA1

      b8d4282fd83e9439ac664a879a87d892592befd5

    • SHA256

      14cda25625d15478439287d983927cb1796fdd8de8e20ae1152f4892c2f989eb

    • SHA512

      5bc6fa7cdf7d6a9ed6b3550f9022a700d941e4354fea53dd9bff92978ebcb3d37b371f3797957e57c6329bbaa97ef5e7b4f62244329b2a8dcea9d5a4fe91068f

    • SSDEEP

      768:ocZOKj8x/QSQ3y/4qFTOdeoJWBhdYnjWcBWDW4s5GyZDa6XX44R9q3UELw:jXwQSYPqFHI8rOjBn4+9DXnELw

    • Mirai

      Mirai is a prevalent Linux malware infecting exposed network devices.

    • Mirai family

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    • Enumerates running processes

      Discovers information about currently running processes on the system

    • Writes file to system bin folder

MITRE ATT&CK Enterprise v15

Tasks