General
-
Target
a47575eccec2f28aef878eb16d3d2d8e
-
Size
41KB
-
Sample
240225-yl7lxsbe9v
-
MD5
a47575eccec2f28aef878eb16d3d2d8e
-
SHA1
eeaf355040358c40c297f02eff7afb77191566bc
-
SHA256
37c67e5f49065b709d04b9bc8a30f111316eda09a22839fe164259fd1bedde90
-
SHA512
57d85cd551e217b04812f0c85a351b46f7a25e0cc43048783785d38aba5197989b2e18e8b15486ef764323843d1f5d8bb482142789203dc2c329dc84965757a2
-
SSDEEP
768:z+CcEYiQGVXTl59M4Nmxix2X4WvECTvHSdYk/ho6KQuw9jtuJgGlzDpbuR1JX:rc/rGx3+sKp8CTvWeBw9jtaVJuV
Malware Config
Extracted
mirai
LZRD
Targets
-
-
Target
a47575eccec2f28aef878eb16d3d2d8e
-
Size
41KB
-
MD5
a47575eccec2f28aef878eb16d3d2d8e
-
SHA1
eeaf355040358c40c297f02eff7afb77191566bc
-
SHA256
37c67e5f49065b709d04b9bc8a30f111316eda09a22839fe164259fd1bedde90
-
SHA512
57d85cd551e217b04812f0c85a351b46f7a25e0cc43048783785d38aba5197989b2e18e8b15486ef764323843d1f5d8bb482142789203dc2c329dc84965757a2
-
SSDEEP
768:z+CcEYiQGVXTl59M4Nmxix2X4WvECTvHSdYk/ho6KQuw9jtuJgGlzDpbuR1JX:rc/rGx3+sKp8CTvWeBw9jtaVJuV
-
Contacts a large (161680) amount of remote hosts
This may indicate a network scan to discover remotely running services.
-
Creates a large amount of network flows
This may indicate a network scan to discover remotely running services.
-
Modifies Watchdog functionality
Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.
-
Enumerates running processes
Discovers information about currently running processes on the system
-