General
-
Target
9ec18a84e779af6ae38b08292cb9fea9
-
Size
141KB
-
Sample
240215-2kl6daae3z
-
MD5
9ec18a84e779af6ae38b08292cb9fea9
-
SHA1
2d8536eea89af27632dca98249a8d9d3645d970e
-
SHA256
d41ac49537f9aa2846f99acf905254208fd2b92e762ecef3ca5110d2d97e6459
-
SHA512
abae1f9467167e105c9b3fef51f1889d4a5be21930a3d63ae92e78648a25c84af8510835602adf80eebb03b724b3fd99e5472d3da22582a4e82df424b90c3f26
-
SSDEEP
3072:walgM69pe0QmlTvIUdt9mrsplDKZUQQBKXAVanXX+F8JyvSPhLZ85iBMR6yoC1Qr:walgM69pe0QmlTvI8t9mrsplDKZUQQBO
Behavioral task
behavioral1
Sample
9ec18a84e779af6ae38b08292cb9fea9
Resource
debian9-armhf-20231215-en
Malware Config
Extracted
mirai
LZRD
Targets
-
-
Target
9ec18a84e779af6ae38b08292cb9fea9
-
Size
141KB
-
MD5
9ec18a84e779af6ae38b08292cb9fea9
-
SHA1
2d8536eea89af27632dca98249a8d9d3645d970e
-
SHA256
d41ac49537f9aa2846f99acf905254208fd2b92e762ecef3ca5110d2d97e6459
-
SHA512
abae1f9467167e105c9b3fef51f1889d4a5be21930a3d63ae92e78648a25c84af8510835602adf80eebb03b724b3fd99e5472d3da22582a4e82df424b90c3f26
-
SSDEEP
3072:walgM69pe0QmlTvIUdt9mrsplDKZUQQBKXAVanXX+F8JyvSPhLZ85iBMR6yoC1Qr:walgM69pe0QmlTvI8t9mrsplDKZUQQBO
Score9/10-
Contacts a large (19829) amount of remote hosts
This may indicate a network scan to discover remotely running services.
-
Creates a large amount of network flows
This may indicate a network scan to discover remotely running services.
-
Modifies Watchdog functionality
Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.
-
Enumerates active TCP sockets
Gets active TCP sockets from /proc virtual filesystem.
-
Enumerates running processes
Discovers information about currently running processes on the system
-