General
-
Target
ad5ed874bf9dec6bd2ef2189f69a6f8f
-
Size
31KB
-
Sample
240229-b36pmaad7x
-
MD5
ad5ed874bf9dec6bd2ef2189f69a6f8f
-
SHA1
3c131d59880774c3f2f047fce17c363ef19dc96e
-
SHA256
ec767b5d00d3d6f710cf6c61d5af564c070615a9535db017fac66b372e7c3aa3
-
SHA512
caaa361eeeb9c76735e51c7ac7fe9ad7a8adb8c59e0a244c452e813ba2bbd9bfa35f9fa6e6e8a1986cf8dba2e450fc1173802444980dda5ceda5f1731e09dc5b
-
SSDEEP
384:A3fpCLrsjHIX69URc+hmnulY1qHprFKt6zhS45vDajssVwfbvrGsUYa3FRWGVCzP:4fpWcehzJFYKgULAssKfbvPRa3zWH
Malware Config
Extracted
mirai
LZRD
Targets
-
-
Target
ad5ed874bf9dec6bd2ef2189f69a6f8f
-
Size
31KB
-
MD5
ad5ed874bf9dec6bd2ef2189f69a6f8f
-
SHA1
3c131d59880774c3f2f047fce17c363ef19dc96e
-
SHA256
ec767b5d00d3d6f710cf6c61d5af564c070615a9535db017fac66b372e7c3aa3
-
SHA512
caaa361eeeb9c76735e51c7ac7fe9ad7a8adb8c59e0a244c452e813ba2bbd9bfa35f9fa6e6e8a1986cf8dba2e450fc1173802444980dda5ceda5f1731e09dc5b
-
SSDEEP
384:A3fpCLrsjHIX69URc+hmnulY1qHprFKt6zhS45vDajssVwfbvrGsUYa3FRWGVCzP:4fpWcehzJFYKgULAssKfbvPRa3zWH
-
Contacts a large (20253) amount of remote hosts
This may indicate a network scan to discover remotely running services.
-
Creates a large amount of network flows
This may indicate a network scan to discover remotely running services.
-
Modifies Watchdog functionality
Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.
-
Enumerates active TCP sockets
Gets active TCP sockets from /proc virtual filesystem.
-
Enumerates running processes
Discovers information about currently running processes on the system
-