Overview

overview

10

Static

static

5

Space.mpsl.elf

debian-12-mipsel

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Space.mpsl.elf

  • Size

    43KB

  • Sample

    241225-mdpwcsskcp

  • MD5

    594b0c6dda90b4666f6cb871ef7ac269

  • SHA1

    f3848823f183a5758e3497e8469f489e3b6fd2af

  • SHA256

    059172ffb609f2b9842c7d75006d6290f38aa8b3226975ebacef5e0ff280637b

  • SHA512

    5a1a1d931bd0c434e98d80d36da42e91ad4cb9e5ea6aa2ed0e3e66d90eec043d627e8acca0fd148997e3b8b7c9996e423f3966cf96cde1ee0b6cb54cddc0ec92

  • SSDEEP

    768:4QdzLFMbXkqyyxwmGFm3qsSPhkj96MiKrecs6cDtyO5XnQDh3nWN:nPmwqBOc31LNrecs6KtPXQDa

Score
10/10
miraibotnetdefense_evasiondiscoveryupx

Malware Config

Targets

    • Target

      Space.mpsl.elf

    • Size

      43KB

    • MD5

      594b0c6dda90b4666f6cb871ef7ac269

    • SHA1

      f3848823f183a5758e3497e8469f489e3b6fd2af

    • SHA256

      059172ffb609f2b9842c7d75006d6290f38aa8b3226975ebacef5e0ff280637b

    • SHA512

      5a1a1d931bd0c434e98d80d36da42e91ad4cb9e5ea6aa2ed0e3e66d90eec043d627e8acca0fd148997e3b8b7c9996e423f3966cf96cde1ee0b6cb54cddc0ec92

    • SSDEEP

      768:4QdzLFMbXkqyyxwmGFm3qsSPhkj96MiKrecs6cDtyO5XnQDh3nWN:nPmwqBOc31LNrecs6KtPXQDa

    Score
    10/10
    miraibotnetdefense_evasiondiscovery

    • Mirai

      Mirai is a prevalent Linux malware infecting exposed network devices.

      botnetmirai

    • Mirai family

      mirai

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

      defense_evasion

    • Enumerates running processes

      Discovers information about currently running processes on the system

    • Writes file to system bin folder

    behavioral1

MITRE ATT&CK Enterprise v15

Tasks