General

  • Target

    Space.arm6.elf

  • Size

    43KB

  • Sample

    250105-ajqcvswqem

  • MD5

    e2e0fe28325390ed0fc478c1d74ec642

  • SHA1

    f3d5e641b1524940add576fc682e5e56647521b0

  • SHA256

    dd937e009bc1990fe88a53c37cdd84094e9af24ed5718a9b875657119c56e61a

  • SHA512

    5e122f60d61be2cdced5cbd23b3cc0628f0ff209fc8d5bfc415f553d62b83efc042ac718cae235c3a4eef178e3017aa9a7b161e542ade3f744728884a8b42445

  • SSDEEP

    768:odZMWNxSsPbNUAoGHIumZfza5DT13t8n03C1BZe3iOzxhbA4LG+mqQxtI9q3UEL3:cMKxSsPbNOGHIumZ7a5DT13r3GUzLbU3

Malware Config

Extracted

Family

mirai

Botnet

LZRD

Targets

    • Target

      Space.arm6.elf

    • Size

      43KB

    • MD5

      e2e0fe28325390ed0fc478c1d74ec642

    • SHA1

      f3d5e641b1524940add576fc682e5e56647521b0

    • SHA256

      dd937e009bc1990fe88a53c37cdd84094e9af24ed5718a9b875657119c56e61a

    • SHA512

      5e122f60d61be2cdced5cbd23b3cc0628f0ff209fc8d5bfc415f553d62b83efc042ac718cae235c3a4eef178e3017aa9a7b161e542ade3f744728884a8b42445

    • SSDEEP

      768:odZMWNxSsPbNUAoGHIumZfza5DT13t8n03C1BZe3iOzxhbA4LG+mqQxtI9q3UEL3:cMKxSsPbNOGHIumZ7a5DT13r3GUzLbU3

    • Mirai

      Mirai is a prevalent Linux malware infecting exposed network devices.

    • Mirai family

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    • Enumerates running processes

      Discovers information about currently running processes on the system

    • Writes file to system bin folder

MITRE ATT&CK Enterprise v15

Tasks