General
-
Target
b8d0b8318240ba9276e3f07f6035323e3657471b2b388a5eba4e114974ffc031.zip
-
Size
49KB
-
Sample
230321-r1vscadd4w
-
MD5
ce992b514f205083a4e39d66f4fb04a7
-
SHA1
112d68145cd01ba4f9b3fa512e348616a9f8602b
-
SHA256
81495c2bc60341f3542765ceb4a69c4288c69cab5865366f4fd5aec87835edd6
-
SHA512
8f4daf8abebbcb9d8c63748527897a26bd5b35226c4bf108caf703a6dae3ee103854799ebf5e5f410ee06870d2840444a325996c8b8667605caa1abcf5d39c02
-
SSDEEP
1536:kXfUQZ8BJEU5oeAxQRCK0b/6zAB/9UttysS4:kXfUZ0UjAiPHzi/MysS4
Behavioral task
behavioral1
Sample
b8d0b8318240ba9276e3f07f6035323e3657471b2b388a5eba4e114974ffc031.elf
Resource
debian9-mipsel-20221111-en
Malware Config
Targets
-
-
Target
b8d0b8318240ba9276e3f07f6035323e3657471b2b388a5eba4e114974ffc031.elf
-
Size
151KB
-
MD5
6829bd31605e02668ff1a34df49200e1
-
SHA1
84e7afed11bc227a48564e7e672ff2064b750fc1
-
SHA256
b8d0b8318240ba9276e3f07f6035323e3657471b2b388a5eba4e114974ffc031
-
SHA512
38134559f58d7a8ce1fa1f2147b1778a3b10ed233e2278b218515931229516160bcfa9f238eac035644ecf3e45cb6689848aab0054852dbcd7d2dade2fd26110
-
SSDEEP
3072:34yA4MlDX2PW4aJC1mauRshTp4jmrThPaLEnvPrNb:34plDX2P5aJ0dJHQmrThPaLEnvPrNb
Score9/10-
Modifies the Watchdog daemon
Malware like Mirai modify the Watchdog to prevent it restarting an infected system.
-
Reads system routing table
Gets active network interfaces from /proc virtual filesystem.
-
Reads system network configuration
Uses contents of /proc filesystem to enumerate network settings.
-