General
-
Target
3e52af9db19a2219d051de8e7a579b533974ad23cc8b07c1abf2d05a3870d99b.elf
-
Size
20KB
-
Sample
240225-flp3rscg6w
-
MD5
c9e5528e20ea145f226f0b8e144994bc
-
SHA1
e0b37a76f542b172e782f4fce815f734e7c02070
-
SHA256
3e52af9db19a2219d051de8e7a579b533974ad23cc8b07c1abf2d05a3870d99b
-
SHA512
e5d0f9dfb637f2338524245d086a314c74867fbd3b7e3158a5dcf6253056b3f0daf0d95ef3a71b178d886b030ed1d0d5f49c38a8183cc57d1f428b6863b707e7
-
SSDEEP
384:MgWLpj8s/qPui8uZxoIA57RWQjJiEVi+ZkXaqOKV14b+502F2vwA9dWuMW21bAKU:O98o08kxofBE+ZkXaqGbp2F2TWul0c5h
Malware Config
Extracted
mirai
LZRD
Targets
-
-
Target
3e52af9db19a2219d051de8e7a579b533974ad23cc8b07c1abf2d05a3870d99b.elf
-
Size
20KB
-
MD5
c9e5528e20ea145f226f0b8e144994bc
-
SHA1
e0b37a76f542b172e782f4fce815f734e7c02070
-
SHA256
3e52af9db19a2219d051de8e7a579b533974ad23cc8b07c1abf2d05a3870d99b
-
SHA512
e5d0f9dfb637f2338524245d086a314c74867fbd3b7e3158a5dcf6253056b3f0daf0d95ef3a71b178d886b030ed1d0d5f49c38a8183cc57d1f428b6863b707e7
-
SSDEEP
384:MgWLpj8s/qPui8uZxoIA57RWQjJiEVi+ZkXaqOKV14b+502F2vwA9dWuMW21bAKU:O98o08kxofBE+ZkXaqGbp2F2TWul0c5h
-
Modifies Watchdog functionality
Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.
-
Enumerates running processes
Discovers information about currently running processes on the system
-
Writes file to system bin folder
-