General

  • Target

    Space.arm6.elf

  • Size

    43KB

  • Sample

    250111-llgdhsxnhj

  • MD5

    e81d5542ca01980a4f502ff542d29a74

  • SHA1

    1dd634f3c03f715a9a6f6d6f62c7e009068af047

  • SHA256

    d1bfb6a6a94a91073fe9a22f34587c520d4bd67fa4d0d4361b8a487c242e1734

  • SHA512

    bdb940d4324a4b888d3d27221ec92adf4a793050af5555b9e2fd2d1f52a9559f7895249f43162bef36c3ae2796abb269aa11edd095e29934abb8e893ca971c05

  • SSDEEP

    768:ocZOKj8x/QSQ3y/4qFTOdeoJWBhdYnjWcBWDW4s5GyZDa6XXUkpAg9q3UELg:jXwQSYPqFHI8rOjBn4+9DXUSApLg

Malware Config

Extracted

Family

mirai

Botnet

LZRD

Targets

    • Target

      Space.arm6.elf

    • Size

      43KB

    • MD5

      e81d5542ca01980a4f502ff542d29a74

    • SHA1

      1dd634f3c03f715a9a6f6d6f62c7e009068af047

    • SHA256

      d1bfb6a6a94a91073fe9a22f34587c520d4bd67fa4d0d4361b8a487c242e1734

    • SHA512

      bdb940d4324a4b888d3d27221ec92adf4a793050af5555b9e2fd2d1f52a9559f7895249f43162bef36c3ae2796abb269aa11edd095e29934abb8e893ca971c05

    • SSDEEP

      768:ocZOKj8x/QSQ3y/4qFTOdeoJWBhdYnjWcBWDW4s5GyZDa6XXUkpAg9q3UELg:jXwQSYPqFHI8rOjBn4+9DXUSApLg

    • Mirai

      Mirai is a prevalent Linux malware infecting exposed network devices.

    • Mirai family

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    • Enumerates running processes

      Discovers information about currently running processes on the system

    • Writes file to system bin folder

MITRE ATT&CK Enterprise v15

Tasks