General
- Target Space.x86_64.elf
- Size 73KB
- Sample261006-rt43fa1sdw
- SHA256 8a91cc58d4aeee7e1737a41c762824dfb80e240ada91cb2e3439da71eb008bd3
- MD5 299ba05745bfba3bc0ca811d3bd16259
- SHA1 abf057060b2c460f7d2ce65fa10abc98ae2cc8e4
- SHA512 e0232bff90adf7a0f28fdbc34a965f04957bdcc44d800e33dcdfa40db806033c7ead06f948781fd1974a382fb6fd27ed215de44ab2cae0555fe51471129f7539
- SSDEEP 1536:BzIDxEwvZ8b7RRINkGIb/+w4HnC+8l8AnzcUS:BUxEyZKDIWGIf4HT8l8AzcUS
- TLSH T1CA732A57BA4180FEC499C03843BEBA36D87274FE1379729A13D8FE366D56E601E28C54
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
Space.x86_64.elf
Resource
ubuntu1804-amd64-20260513-en
4 signatures
40 seconds
Malware Config
Extracted
Family
-
mirai
Botnet
-
LZRD
C2
-
139.162.5.254
Targets
-
- Target Space.x86_64.elf
- Size 73KB
- SHA256 8a91cc58d4aeee7e1737a41c762824dfb80e240ada91cb2e3439da71eb008bd3
- MD5 299ba05745bfba3bc0ca811d3bd16259
- SHA1 abf057060b2c460f7d2ce65fa10abc98ae2cc8e4
- SHA512 e0232bff90adf7a0f28fdbc34a965f04957bdcc44d800e33dcdfa40db806033c7ead06f948781fd1974a382fb6fd27ed215de44ab2cae0555fe51471129f7539
- SSDEEP 1536:BzIDxEwvZ8b7RRINkGIb/+w4HnC+8l8AnzcUS:BUxEyZKDIWGIf4HT8l8AzcUS
- TLSH T1CA732A57BA4180FEC499C03843BEBA36D87274FE1379729A13D8FE366D56E601E28C54
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Modifies Watchdog functionality
Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.
-
Enumerates running processes
Discovers information about currently running processes on the system
-
Writes file to system bin folder