General

  • Target

    Space.arm6.elf

  • Size

    43KB

  • Sample

    250110-s76zma1mgq

  • MD5

    630feb79c29304194e9592aaa241a1c8

  • SHA1

    b618cc4f3414edf563bae15df1cc498e216b469e

  • SHA256

    a3e2df5784856f8a124b55c20f38bff9500326a8959876dccf6244b39f77f177

  • SHA512

    9f8c8ae7c8a53810ae73a44c03e3b7ebfafdb2b8fd03d41aee554f744fd4908962efd8a46b20283fc96fb2577df0b47da69186edc88af6a5c0ef2fa1ff52d707

  • SSDEEP

    768:MlZOKj8x/QSQ3y/3R2xDeyn0w8NhpovIaqpbAuTgj9MaDugMnbylr09q3UELF:IXwQSYWfKOWvInbrajMbylrdLF

Malware Config

Extracted

Family

mirai

Botnet

LZRD

Targets

    • Target

      Space.arm6.elf

    • Size

      43KB

    • MD5

      630feb79c29304194e9592aaa241a1c8

    • SHA1

      b618cc4f3414edf563bae15df1cc498e216b469e

    • SHA256

      a3e2df5784856f8a124b55c20f38bff9500326a8959876dccf6244b39f77f177

    • SHA512

      9f8c8ae7c8a53810ae73a44c03e3b7ebfafdb2b8fd03d41aee554f744fd4908962efd8a46b20283fc96fb2577df0b47da69186edc88af6a5c0ef2fa1ff52d707

    • SSDEEP

      768:MlZOKj8x/QSQ3y/3R2xDeyn0w8NhpovIaqpbAuTgj9MaDugMnbylr09q3UELF:IXwQSYWfKOWvInbrajMbylrdLF

    • Mirai

      Mirai is a prevalent Linux malware infecting exposed network devices.

    • Mirai family

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    • Enumerates running processes

      Discovers information about currently running processes on the system

    • Writes file to system bin folder

MITRE ATT&CK Enterprise v15

Tasks