General
-
Target
jj.arm
-
Size
26KB
-
Sample
240228-dvackaab45
-
MD5
4db7683981c68458797406a57473edc2
-
SHA1
5dccc73091c7dc31e6d48b1a05e409d329bc56a1
-
SHA256
cfb725265679f3f74f05d45cb53baf1b685ed3eab92a61be23eadfd14aea3245
-
SHA512
5f8bf56e74c46241edff3d13c7c9679b569f2b0d2d64268af5d900b66141bf7e7246a42288839ab1dfd475dc911a8408a03ded16239b43eb95ac908f5d70f7e6
-
SSDEEP
768:Aaue2jtp+Fi2ZH+WwSyPaeYmZUOAVqTPs3UozW:ke2pp+FioHQZEqTCzW
Malware Config
Extracted
mirai
LZRD
www.sushiking.world
s.sushiking.world
Targets
-
-
Target
jj.arm
-
Size
26KB
-
MD5
4db7683981c68458797406a57473edc2
-
SHA1
5dccc73091c7dc31e6d48b1a05e409d329bc56a1
-
SHA256
cfb725265679f3f74f05d45cb53baf1b685ed3eab92a61be23eadfd14aea3245
-
SHA512
5f8bf56e74c46241edff3d13c7c9679b569f2b0d2d64268af5d900b66141bf7e7246a42288839ab1dfd475dc911a8408a03ded16239b43eb95ac908f5d70f7e6
-
SSDEEP
768:Aaue2jtp+Fi2ZH+WwSyPaeYmZUOAVqTPs3UozW:ke2pp+FioHQZEqTCzW
-
Modifies Watchdog functionality
Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.
-
Enumerates active TCP sockets
Gets active TCP sockets from /proc virtual filesystem.
-
Enumerates running processes
Discovers information about currently running processes on the system
-