General

  • Target

    Space.arm7.elf

  • Size

    60KB

  • Sample

    250111-lhpwgsxmfq

  • MD5

    93aa9a8b4e28717e0830ef8b2d82bcc3

  • SHA1

    1e2bb31f3c460072cde00c7640022bba97574c48

  • SHA256

    39bd327da21fbde353f8e485be703f20946c1862a5804775dda72bd0cd3b42aa

  • SHA512

    6fa887700f5dd3e8713842d4d7acdad88934766aabb0c3f85b3bdbe8ff76ec9df75d38c02f2135cfff334311f11d0aa98094c1b8342058e7d4df07574b752406

  • SSDEEP

    1536:zVQSmwtMJXmejtrLTM5Tfv83KJ2crl2EW8:zVywt8XZtLgTX83KHl2EW8

Malware Config

Extracted

Family

mirai

Botnet

LZRD

Targets

    • Target

      Space.arm7.elf

    • Size

      60KB

    • MD5

      93aa9a8b4e28717e0830ef8b2d82bcc3

    • SHA1

      1e2bb31f3c460072cde00c7640022bba97574c48

    • SHA256

      39bd327da21fbde353f8e485be703f20946c1862a5804775dda72bd0cd3b42aa

    • SHA512

      6fa887700f5dd3e8713842d4d7acdad88934766aabb0c3f85b3bdbe8ff76ec9df75d38c02f2135cfff334311f11d0aa98094c1b8342058e7d4df07574b752406

    • SSDEEP

      1536:zVQSmwtMJXmejtrLTM5Tfv83KJ2crl2EW8:zVywt8XZtLgTX83KHl2EW8

    • Mirai

      Mirai is a prevalent Linux malware infecting exposed network devices.

    • Mirai family

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    • Enumerates running processes

      Discovers information about currently running processes on the system

    • Writes file to system bin folder

MITRE ATT&CK Enterprise v15

Tasks