General

  • Target

    Space.mpsl.elf

  • Size

    43KB

  • Sample

    241227-lq5lxatqdl

  • MD5

    6ed00a320457ddc794bad48f33fc5984

  • SHA1

    25aabd4c30394e90b53ffab2848bc22db75c61c0

  • SHA256

    c33e90da82794b4a558683f5d4bdf09467100db760c2e87d8a905c66566edabc

  • SHA512

    81ac48b0bd19a1fea4b662d21ea7e83c2c14b06defabcc031d57e96f34475ee2fd86b1dac99bc1d07e0451fd3f743cf829d8900a60d0d8e15473883cbfdeea52

  • SSDEEP

    768:uQdzLFMbXkqyyxwmGFm3qsSPhkj96MiKrecs6cDtyO5XnQDgLZW2:9PmwqBOc31LNrecs6KtPXQDgLB

Malware Config

Targets

    • Target

      Space.mpsl.elf

    • Size

      43KB

    • MD5

      6ed00a320457ddc794bad48f33fc5984

    • SHA1

      25aabd4c30394e90b53ffab2848bc22db75c61c0

    • SHA256

      c33e90da82794b4a558683f5d4bdf09467100db760c2e87d8a905c66566edabc

    • SHA512

      81ac48b0bd19a1fea4b662d21ea7e83c2c14b06defabcc031d57e96f34475ee2fd86b1dac99bc1d07e0451fd3f743cf829d8900a60d0d8e15473883cbfdeea52

    • SSDEEP

      768:uQdzLFMbXkqyyxwmGFm3qsSPhkj96MiKrecs6cDtyO5XnQDgLZW2:9PmwqBOc31LNrecs6KtPXQDgLB

    • Mirai

      Mirai is a prevalent Linux malware infecting exposed network devices.

    • Mirai family

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    • Enumerates running processes

      Discovers information about currently running processes on the system

    • Writes file to system bin folder

MITRE ATT&CK Enterprise v15

Tasks