General
-
Target
00940a6466ffdd660a5cfceec98a74d8.elf
-
Size
20KB
-
Sample
240325-lqgvvafd5t
-
MD5
00940a6466ffdd660a5cfceec98a74d8
-
SHA1
9673c3ab07684916584fdbce3b5dc4e1e5645533
-
SHA256
37abd9ae1ce97738f9e0b116d887603f5533863cac6b881dd048445b1f96d1d1
-
SHA512
aedff14a60291146b8e3c18751459c501f3851e42728eccb5cd48a775b6e8c769100bb5798c4c739ce6b9027c18078cb9edc335cb948ee2493599d6e25b3422e
-
SSDEEP
384:M0DLpj8s/qPui8uZxoIA57RWQjJiEVi+ZkXaqOKV14b+502F2vwA9dWuMW21bAK5:x98o08kxofBE+ZkXaqGbp2F2TWul0c5M
Malware Config
Extracted
mirai
LZRD
Targets
-
-
Target
00940a6466ffdd660a5cfceec98a74d8.elf
-
Size
20KB
-
MD5
00940a6466ffdd660a5cfceec98a74d8
-
SHA1
9673c3ab07684916584fdbce3b5dc4e1e5645533
-
SHA256
37abd9ae1ce97738f9e0b116d887603f5533863cac6b881dd048445b1f96d1d1
-
SHA512
aedff14a60291146b8e3c18751459c501f3851e42728eccb5cd48a775b6e8c769100bb5798c4c739ce6b9027c18078cb9edc335cb948ee2493599d6e25b3422e
-
SSDEEP
384:M0DLpj8s/qPui8uZxoIA57RWQjJiEVi+ZkXaqOKV14b+502F2vwA9dWuMW21bAK5:x98o08kxofBE+ZkXaqGbp2F2TWul0c5M
-
Modifies Watchdog functionality
Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.
-
Enumerates running processes
Discovers information about currently running processes on the system
-
Writes file to system bin folder
-