General
-
Target
d4ce6a8367d840118afdb064c639cc74.elf
-
Size
37KB
-
Sample
230504-se1l5sfa7s
-
MD5
d4ce6a8367d840118afdb064c639cc74
-
SHA1
85cf4120be8faf5c3736a7045d4a5921fe5ab542
-
SHA256
89ded71040f0f0b728b5ce4d9c0affd87bae2e227068b515fc8099f6ea310ffc
-
SHA512
7279bb9dc79281d0283b24ee5ffccb32bd2959d400e959ab7f8d2fa7a20173e63b350d94daeb4e27224cf2c4545a6e7a928b7c9daffb7c403ab8c49665909d0d
-
SSDEEP
768:8cFiyluiEduvR0MrPNjIvSGb22VjGqxQLZUiBxTQFTT9nsd6WMI:vFdY4ynbV6BLh7QRT9nUx
Malware Config
Extracted
mirai
UNSTABLE
Targets
-
-
Target
d4ce6a8367d840118afdb064c639cc74.elf
-
Size
37KB
-
MD5
d4ce6a8367d840118afdb064c639cc74
-
SHA1
85cf4120be8faf5c3736a7045d4a5921fe5ab542
-
SHA256
89ded71040f0f0b728b5ce4d9c0affd87bae2e227068b515fc8099f6ea310ffc
-
SHA512
7279bb9dc79281d0283b24ee5ffccb32bd2959d400e959ab7f8d2fa7a20173e63b350d94daeb4e27224cf2c4545a6e7a928b7c9daffb7c403ab8c49665909d0d
-
SSDEEP
768:8cFiyluiEduvR0MrPNjIvSGb22VjGqxQLZUiBxTQFTT9nsd6WMI:vFdY4ynbV6BLh7QRT9nUx
-
Contacts a large (222532) amount of remote hosts
This may indicate a network scan to discover remotely running services.
-
Creates a large amount of network flows
This may indicate a network scan to discover remotely running services.
-
Modifies the Watchdog daemon
Malware like Mirai modify the Watchdog to prevent it restarting an infected system.
-
Writes file to system bin folder
-
Changes its process name
-
Reads runtime system information
Reads data from /proc virtual filesystem.
-