General
-
Target
b3e02a6959aa2b14e04a2751adba3a6c
-
Size
31KB
-
Sample
240305-fxpw5sga32
-
MD5
b3e02a6959aa2b14e04a2751adba3a6c
-
SHA1
fd5db924b94655ddb595af7ceffed9ff363f5242
-
SHA256
6e8cb82d642cdfe3d66db03b222fa34a2188387fbb114f0b10680c54561e0a85
-
SHA512
7cc58f8b3ff74e2bf66736194849d74d90c5d9524947878b4a0dd3ad18ca036c108ea1c14476c1e474a53209c15318292952fd5c632eceda059aa550fe1fc951
-
SSDEEP
768:k4JlYBuDo6erp03CeIpLuoxfEZBZ4HxYJu8xCQ+WA:k0KBuGrp4CexZBZIvPQs
Malware Config
Extracted
mirai
LZRD
Targets
-
-
Target
b3e02a6959aa2b14e04a2751adba3a6c
-
Size
31KB
-
MD5
b3e02a6959aa2b14e04a2751adba3a6c
-
SHA1
fd5db924b94655ddb595af7ceffed9ff363f5242
-
SHA256
6e8cb82d642cdfe3d66db03b222fa34a2188387fbb114f0b10680c54561e0a85
-
SHA512
7cc58f8b3ff74e2bf66736194849d74d90c5d9524947878b4a0dd3ad18ca036c108ea1c14476c1e474a53209c15318292952fd5c632eceda059aa550fe1fc951
-
SSDEEP
768:k4JlYBuDo6erp03CeIpLuoxfEZBZ4HxYJu8xCQ+WA:k0KBuGrp4CexZBZIvPQs
-
Contacts a large (20175) amount of remote hosts
This may indicate a network scan to discover remotely running services.
-
Creates a large amount of network flows
This may indicate a network scan to discover remotely running services.
-
Modifies Watchdog functionality
Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.
-
Enumerates active TCP sockets
Gets active TCP sockets from /proc virtual filesystem.
-
Enumerates running processes
Discovers information about currently running processes on the system
-