Analysis

  • max time kernel
    0s
  • platform
    debian-9_armhf
  • resource
    debian9-armhf-20240611-en
  • resource tags

    arch:armhfimage:debian9-armhf-20240611-enkernel:4.9.0-13-armmp-lpaelocale:en-usos:debian-9-armhfsystem
  • submitted
    05-01-2025 01:20

General

  • Target

    Space.arm5.elf

  • Size

    20KB

  • MD5

    5c799c56f9843ada3a3ef4212839bd6d

  • SHA1

    e3e0d2c1404736be2ab2e8d4971712aae391ed01

  • SHA256

    18cdca31b9c2e321981328baea89593fc1c974bc61237599bb2cef509d0d4813

  • SHA512

    2c72595c63963586f9cd678f4b93ec5b8e749e2384c2bc7322cbe7c92ef9ae3815a5c0c587ae95802e8ce2cf7ef449466266bdf76dd7b6a99adf051185b6b17b

  • SSDEEP

    384:Zuv5xLta97bejQe2BX9OtUWU7KlyBj7/IJDh7qmdGUEpia3yIe:ELo93ejQ77O5CKlyBju9q3UELiIe

Score
10/10

Malware Config

Extracted

Family

mirai

Botnet

LZRD

Signatures

  • Mirai

    Mirai is a prevalent Linux malware infecting exposed network devices.

  • Mirai family

Processes

  • /tmp/Space.arm5.elf
    /tmp/Space.arm5.elf
    1⤵
      PID:647

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads