General

  • Target

    Space.arm.elf

  • Size

    38KB

  • Sample

    250111-llf3ravmfv

  • MD5

    6e4bbb8b19271e5da4eb725b20462314

  • SHA1

    0b818439ae6b16ddab298143d5ef6b9174dd51b9

  • SHA256

    891ac4bb320725449b549ea5c7dedb37c3e4cdd408f43913bdc9eb25d698cc72

  • SHA512

    8ef5b0455c3392eef320f56d0e1f92b98006d33cefcbfae63730fc8cf6b69284eb0b9f27e0aa05e76bf659f78df52c5649d476f187c5d3efbab3f98606cd5300

  • SSDEEP

    768:cu7RATMUu4f7RDdP6NM8I52VNbvdFsDJ456Bs3UozOX:tRAC4fNDdP6N5pd+DwzOX

Malware Config

Extracted

Family

mirai

Botnet

LZRD

Targets

    • Target

      Space.arm.elf

    • Size

      38KB

    • MD5

      6e4bbb8b19271e5da4eb725b20462314

    • SHA1

      0b818439ae6b16ddab298143d5ef6b9174dd51b9

    • SHA256

      891ac4bb320725449b549ea5c7dedb37c3e4cdd408f43913bdc9eb25d698cc72

    • SHA512

      8ef5b0455c3392eef320f56d0e1f92b98006d33cefcbfae63730fc8cf6b69284eb0b9f27e0aa05e76bf659f78df52c5649d476f187c5d3efbab3f98606cd5300

    • SSDEEP

      768:cu7RATMUu4f7RDdP6NM8I52VNbvdFsDJ456Bs3UozOX:tRAC4fNDdP6N5pd+DwzOX

    • Mirai

      Mirai is a prevalent Linux malware infecting exposed network devices.

    • Mirai family

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    • Enumerates running processes

      Discovers information about currently running processes on the system

    • Writes file to system bin folder

MITRE ATT&CK Enterprise v15

Tasks