General
-
Target
25148a67d4a633d2ecb4e4b88017e0c6.bin
-
Size
33KB
-
Sample
231010-bjyjxahf7t
-
MD5
cc239819b474dc946282915822adb2c3
-
SHA1
83104c3edcf415ed60329d38452e77606e4c0f6b
-
SHA256
eead8beb53d42b8870d687cd697468c61dc26650e48870483292319b6b43ecde
-
SHA512
bca28034467e01894a2dd1b9c57f9a326c47e6bc9a8a418e2ccffa0b6b00dc050381f010f19bfbc8e0b4f457b4d17364c848faf1fd84ed2116f200f1b7425dd2
-
SSDEEP
768:LnlPFMj1JtpnVD8ywD3Ja8KbwuUXlVZhqe+UHJW:Lnlaj1JtvD8ywD5a8K8uUVV2efJW
Behavioral task
behavioral1
Sample
9b840b89f921d1da241ee67885317188163f68c3c41e1f48c34796f89a96b07a.elf
Resource
ubuntu1804-amd64-20230831-en
Malware Config
Extracted
mirai
wxd5cxqklilifh0m4pv8tg.dekma-gay.ru
Targets
-
-
Target
9b840b89f921d1da241ee67885317188163f68c3c41e1f48c34796f89a96b07a.elf
-
Size
66KB
-
MD5
25148a67d4a633d2ecb4e4b88017e0c6
-
SHA1
be09ab65625a1f2fd48969773b77d99c9c61ca6f
-
SHA256
9b840b89f921d1da241ee67885317188163f68c3c41e1f48c34796f89a96b07a
-
SHA512
1b7b65676a69c5b6982414c673b403dec688b5a7bea1a31c5192d7f5332ddd8d713b838dac1888d5ceb5a3fe37ca3378cc6a5acfea844d9da72a7d43f15951ce
-
SSDEEP
1536:T/u7iGGEUDUmclqukZVyeKDkGM1bPXim1UzvpgxU1O:at1UDUXlqVVUkGMB7qzvUU1
Score9/10-
Contacts a large (23513) amount of remote hosts
This may indicate a network scan to discover remotely running services.
-
Creates a large amount of network flows
This may indicate a network scan to discover remotely running services.
-
Changes its process name
-
Modifies Watchdog functionality
Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.
-