General
-
Target
a51686c132d858445987dc990b31203e.elf
-
Size
32KB
-
Sample
230529-yzdwrsdd59
-
MD5
a51686c132d858445987dc990b31203e
-
SHA1
881fe3a9602537c841ce4d2d384898ab949fc1a2
-
SHA256
2ecb8699297bfb34e7153d8f026b977924251d35e150282b7c5035c9d5d02fdd
-
SHA512
cf5ac8051feef2d82c378e1a6f99ca07989c0d751c651f386bda263c73c09a079fb8cf75ebe524971ac25fc69e022044814606094961354ab1a28c5ea40b2a6b
-
SSDEEP
768:r3uRGSh9vJ0c+K/ZoZF3AoUyXu+jzuNH4+FuoI7nbcuyD7Uiyq1:buFhf+KOZhADGjzuNY+Futnouy8Zq1
Malware Config
Extracted
mirai
UNSTABLE
pxp.softdetails.in
Targets
-
-
Target
a51686c132d858445987dc990b31203e.elf
-
Size
32KB
-
MD5
a51686c132d858445987dc990b31203e
-
SHA1
881fe3a9602537c841ce4d2d384898ab949fc1a2
-
SHA256
2ecb8699297bfb34e7153d8f026b977924251d35e150282b7c5035c9d5d02fdd
-
SHA512
cf5ac8051feef2d82c378e1a6f99ca07989c0d751c651f386bda263c73c09a079fb8cf75ebe524971ac25fc69e022044814606094961354ab1a28c5ea40b2a6b
-
SSDEEP
768:r3uRGSh9vJ0c+K/ZoZF3AoUyXu+jzuNH4+FuoI7nbcuyD7Uiyq1:buFhf+KOZhADGjzuNY+Futnouy8Zq1
-
Contacts a large (183629) amount of remote hosts
This may indicate a network scan to discover remotely running services.
-
Creates a large amount of network flows
This may indicate a network scan to discover remotely running services.
-
Changes its process name
-
Modifies Watchdog functionality
Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.
-
Writes file to system bin folder
-