General

  • Target

    Space.arm.elf

  • Size

    36KB

  • Sample

    250104-2fxrba1jgt

  • MD5

    ff703c0afa98f249c0b89c5920b66fe2

  • SHA1

    368027ba7068523245b395e07d8a9595e632a23d

  • SHA256

    865c5e7cd65d20fe128d7995cbc748e8c8ebe11bc64d3ea933343216ea1117ad

  • SHA512

    4fc5e2ad4ba61d75cbf3198e410ff065486723a49e13584d29a627910094b23ed6e1e4f46cf95bd3f1b0ef025dbce3d5b36786df4eca0573292469f930982994

  • SSDEEP

    768:QwZn98N6YKRLj5Aj4m2wvxHlEB4Da1xSr0Oo0U0mxs3Uoz7:jZnQGC4adDm7Ou0mcz7

Malware Config

Extracted

Family

mirai

Botnet

LZRD

Targets

    • Target

      Space.arm.elf

    • Size

      36KB

    • MD5

      ff703c0afa98f249c0b89c5920b66fe2

    • SHA1

      368027ba7068523245b395e07d8a9595e632a23d

    • SHA256

      865c5e7cd65d20fe128d7995cbc748e8c8ebe11bc64d3ea933343216ea1117ad

    • SHA512

      4fc5e2ad4ba61d75cbf3198e410ff065486723a49e13584d29a627910094b23ed6e1e4f46cf95bd3f1b0ef025dbce3d5b36786df4eca0573292469f930982994

    • SSDEEP

      768:QwZn98N6YKRLj5Aj4m2wvxHlEB4Da1xSr0Oo0U0mxs3Uoz7:jZnQGC4adDm7Ou0mcz7

    • Mirai

      Mirai is a prevalent Linux malware infecting exposed network devices.

    • Mirai family

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    • Enumerates running processes

      Discovers information about currently running processes on the system

    • Writes file to system bin folder

MITRE ATT&CK Enterprise v15

Tasks