General
-
Target
98e8e0db973bc25a314918fb3065778f16821978fd9dbbf067ead453b4ad8b00.elf
-
Size
126KB
-
Sample
240222-gsmfwsdf33
-
MD5
633c252c023b0756d7d5740d2f44fe5e
-
SHA1
cfffad391d27ba3c270b9ee9de74d998ec9c9616
-
SHA256
98e8e0db973bc25a314918fb3065778f16821978fd9dbbf067ead453b4ad8b00
-
SHA512
ebbafb6093090ecba1cfeed38ee945dad2a2fc8ed4ff64670d02dfdacde1f622534f406d8349a89a4822f14a4ca41c8ac5081711d705ffcebba0afbf77045a92
-
SSDEEP
3072:cowpuQyNSG2eRa1styK9flTQPHoWrScVM/9OAvjik:cowpuQyNSG24a1styKdlTuIWrSmM/9nd
Behavioral task
behavioral1
Sample
98e8e0db973bc25a314918fb3065778f16821978fd9dbbf067ead453b4ad8b00.elf
Resource
debian9-armhf-20240221-en
Malware Config
Extracted
mirai
LZRD
Targets
-
-
Target
98e8e0db973bc25a314918fb3065778f16821978fd9dbbf067ead453b4ad8b00.elf
-
Size
126KB
-
MD5
633c252c023b0756d7d5740d2f44fe5e
-
SHA1
cfffad391d27ba3c270b9ee9de74d998ec9c9616
-
SHA256
98e8e0db973bc25a314918fb3065778f16821978fd9dbbf067ead453b4ad8b00
-
SHA512
ebbafb6093090ecba1cfeed38ee945dad2a2fc8ed4ff64670d02dfdacde1f622534f406d8349a89a4822f14a4ca41c8ac5081711d705ffcebba0afbf77045a92
-
SSDEEP
3072:cowpuQyNSG2eRa1styK9flTQPHoWrScVM/9OAvjik:cowpuQyNSG24a1styKdlTuIWrSmM/9nd
Score7/10-
Modifies Watchdog functionality
Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.
-
Enumerates running processes
Discovers information about currently running processes on the system
-
Writes file to system bin folder
-