General

  • Target

    Space.x86.elf

  • Size

    38KB

  • Sample

    250105-baxw1sxqcr

  • MD5

    51ac76a50f6b669ab90ebd8c5e903f8d

  • SHA1

    e1847908d10cdd7face1f7ec73cd7842f02a3b90

  • SHA256

    a23f0f8effeec0ea89d80aaae567e5c3d118a108b8feea8e39b4d3aa10fb7bf9

  • SHA512

    2195b914ceacee800778a74a7fda7f8ce9bce361856ce062a01129b928c83abf197eda8ddc414b70e7993207a68ac62bd90664811581f342f8f5f5408ab8d398

  • SSDEEP

    768:9favOe6etQzOE6JfpdbHVNM5HegIvcLjCPyUvnS5vVWVOs/nbcuyD7UrQRjl:Evh6etuOE6JbbHVNMDlSyK8vwVOs/noh

Malware Config

Extracted

Family

mirai

Botnet

LZRD

Targets

    • Target

      Space.x86.elf

    • Size

      38KB

    • MD5

      51ac76a50f6b669ab90ebd8c5e903f8d

    • SHA1

      e1847908d10cdd7face1f7ec73cd7842f02a3b90

    • SHA256

      a23f0f8effeec0ea89d80aaae567e5c3d118a108b8feea8e39b4d3aa10fb7bf9

    • SHA512

      2195b914ceacee800778a74a7fda7f8ce9bce361856ce062a01129b928c83abf197eda8ddc414b70e7993207a68ac62bd90664811581f342f8f5f5408ab8d398

    • SSDEEP

      768:9favOe6etQzOE6JfpdbHVNM5HegIvcLjCPyUvnS5vVWVOs/nbcuyD7UrQRjl:Evh6etuOE6JbbHVNMDlSyK8vwVOs/noh

    • Mirai

      Mirai is a prevalent Linux malware infecting exposed network devices.

    • Mirai family

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    • Enumerates running processes

      Discovers information about currently running processes on the system

    • Writes file to system bin folder

MITRE ATT&CK Enterprise v15

Tasks