General

  • Target

    Space.x86.elf

  • Size

    34KB

  • Sample

    250104-2tc9tstkgp

  • MD5

    9e06007e1384257a6df12f7da25e5b19

  • SHA1

    9c5a1152711a053b141a5c9501ae0e345e94b93d

  • SHA256

    a0a8c627d6b38d9d59581c9cc98e0a561860e79f37122e18e87d1608cdab3050

  • SHA512

    fdcc99ecbec67f540498ff054986b18a981c96b644890a4b3915b29c9466a1bea74b233483fef48b71d33d30c776296de81823fef639c4e0f8c6053319ecae07

  • SSDEEP

    768:yuL6rWgJnNCXj2IFvhJKWnO39s2OZ6ZslZGdhmyP9nbcuyD7UHQRji:CrWSnwZTKz0ZCsl4dQu9nouy8Hye

Malware Config

Extracted

Family

mirai

Botnet

LZRD

Targets

    • Target

      Space.x86.elf

    • Size

      34KB

    • MD5

      9e06007e1384257a6df12f7da25e5b19

    • SHA1

      9c5a1152711a053b141a5c9501ae0e345e94b93d

    • SHA256

      a0a8c627d6b38d9d59581c9cc98e0a561860e79f37122e18e87d1608cdab3050

    • SHA512

      fdcc99ecbec67f540498ff054986b18a981c96b644890a4b3915b29c9466a1bea74b233483fef48b71d33d30c776296de81823fef639c4e0f8c6053319ecae07

    • SSDEEP

      768:yuL6rWgJnNCXj2IFvhJKWnO39s2OZ6ZslZGdhmyP9nbcuyD7UHQRji:CrWSnwZTKz0ZCsl4dQu9nouy8Hye

    • Mirai

      Mirai is a prevalent Linux malware infecting exposed network devices.

    • Mirai family

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    • Enumerates running processes

      Discovers information about currently running processes on the system

    • Writes file to system bin folder

MITRE ATT&CK Enterprise v15

Tasks