General

  • Target

    Space.arm7.elf

  • Size

    60KB

  • Sample

    250105-qfcklavnbv

  • MD5

    b60201aee9d3ce51cca48290156bebe9

  • SHA1

    91a695c05fb046c5e1860433da969f6628f63422

  • SHA256

    2eaac4e122449261ce1d6d93a2f8413fd03fc083a52f05f95da4966c08c4e89c

  • SHA512

    11c0f3c59309d54ff236e85d725fb03d6bfde3f79957f1ea59731ebcb8a8480eb791401dcaf4453bdf1bbde7a299ca9a7ecb2f67b39b9d6a33330950e845ca2a

  • SSDEEP

    768:wLILyQYdU0MXLHQpO6Ahs2BIj0iERJhzEazQ1AMDeLup+5W1av0n9q3UEL3e9YzG:6u0ojhs2pi4OxDeI4NL3e9+s8/ZyoZ7K

Malware Config

Extracted

Family

mirai

Botnet

LZRD

Targets

    • Target

      Space.arm7.elf

    • Size

      60KB

    • MD5

      b60201aee9d3ce51cca48290156bebe9

    • SHA1

      91a695c05fb046c5e1860433da969f6628f63422

    • SHA256

      2eaac4e122449261ce1d6d93a2f8413fd03fc083a52f05f95da4966c08c4e89c

    • SHA512

      11c0f3c59309d54ff236e85d725fb03d6bfde3f79957f1ea59731ebcb8a8480eb791401dcaf4453bdf1bbde7a299ca9a7ecb2f67b39b9d6a33330950e845ca2a

    • SSDEEP

      768:wLILyQYdU0MXLHQpO6Ahs2BIj0iERJhzEazQ1AMDeLup+5W1av0n9q3UEL3e9YzG:6u0ojhs2pi4OxDeI4NL3e9+s8/ZyoZ7K

    • Mirai

      Mirai is a prevalent Linux malware infecting exposed network devices.

    • Mirai family

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    • Enumerates running processes

      Discovers information about currently running processes on the system

    • Writes file to system bin folder

MITRE ATT&CK Enterprise v15

Tasks