General

  • Target

    Space.x86.elf

  • Size

    37KB

  • Sample

    250110-s5bqpsylhw

  • MD5

    c554cb8996668257429e6d593db407a6

  • SHA1

    1bb9fc08953b41ee6de78b6a556333194baafdb0

  • SHA256

    36cd33c6ad1db73afeda54efba7e2c17e21c0afef5b9badbe8e38a23045cb4ea

  • SHA512

    818e1b7606ecb5956b00f17fdf33a4d5fbd6c8dbf833ae7bc8ab0b10842fa399e45e05113761848c4cf7f84d9b4447461b5270490f24d692b8ea8991f8134197

  • SSDEEP

    768:Oa+BWS+ZPwIIBPGsiF6BSvGQO1npdMSflQ9yydHwzILU6Z9gEnbcuyD7UrQRjG:Oa+BH+hKBpiMBSvGQOBp49yypU63nou7

Malware Config

Extracted

Family

mirai

Botnet

LZRD

Targets

    • Target

      Space.x86.elf

    • Size

      37KB

    • MD5

      c554cb8996668257429e6d593db407a6

    • SHA1

      1bb9fc08953b41ee6de78b6a556333194baafdb0

    • SHA256

      36cd33c6ad1db73afeda54efba7e2c17e21c0afef5b9badbe8e38a23045cb4ea

    • SHA512

      818e1b7606ecb5956b00f17fdf33a4d5fbd6c8dbf833ae7bc8ab0b10842fa399e45e05113761848c4cf7f84d9b4447461b5270490f24d692b8ea8991f8134197

    • SSDEEP

      768:Oa+BWS+ZPwIIBPGsiF6BSvGQO1npdMSflQ9yydHwzILU6Z9gEnbcuyD7UrQRjG:Oa+BH+hKBpiMBSvGQOBp49yypU63nou7

    • Mirai

      Mirai is a prevalent Linux malware infecting exposed network devices.

    • Mirai family

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    • Enumerates running processes

      Discovers information about currently running processes on the system

    • Writes file to system bin folder

MITRE ATT&CK Enterprise v15

Tasks