Overview

overview

10

Static

static

5

Space.mpsl.elf

debian-12-mipsel

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Space.mpsl.elf

  • Size

    43KB

  • Sample

    241227-lhmfcstnbs

  • MD5

    6ed00a320457ddc794bad48f33fc5984

  • SHA1

    25aabd4c30394e90b53ffab2848bc22db75c61c0

  • SHA256

    c33e90da82794b4a558683f5d4bdf09467100db760c2e87d8a905c66566edabc

  • SHA512

    81ac48b0bd19a1fea4b662d21ea7e83c2c14b06defabcc031d57e96f34475ee2fd86b1dac99bc1d07e0451fd3f743cf829d8900a60d0d8e15473883cbfdeea52

  • SSDEEP

    768:uQdzLFMbXkqyyxwmGFm3qsSPhkj96MiKrecs6cDtyO5XnQDgLZW2:9PmwqBOc31LNrecs6KtPXQDgLB

Score
10/10
miraibotnetdefense_evasiondiscoveryupx

Malware Config

Targets

    • Target

      Space.mpsl.elf

    • Size

      43KB

    • MD5

      6ed00a320457ddc794bad48f33fc5984

    • SHA1

      25aabd4c30394e90b53ffab2848bc22db75c61c0

    • SHA256

      c33e90da82794b4a558683f5d4bdf09467100db760c2e87d8a905c66566edabc

    • SHA512

      81ac48b0bd19a1fea4b662d21ea7e83c2c14b06defabcc031d57e96f34475ee2fd86b1dac99bc1d07e0451fd3f743cf829d8900a60d0d8e15473883cbfdeea52

    • SSDEEP

      768:uQdzLFMbXkqyyxwmGFm3qsSPhkj96MiKrecs6cDtyO5XnQDgLZW2:9PmwqBOc31LNrecs6KtPXQDgLB

    Score
    10/10
    miraibotnetdefense_evasiondiscovery

    • Mirai

      Mirai is a prevalent Linux malware infecting exposed network devices.

      botnetmirai

    • Mirai family

      mirai

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

      defense_evasion

    • Enumerates running processes

      Discovers information about currently running processes on the system

    • Writes file to system bin folder

    behavioral1

MITRE ATT&CK Enterprise v15

Tasks