General
-
Target
a206e334022c32d06d937f6eb010cbc782684b6dd7d93e814b204e3b1bedd79d.elf
-
Size
45KB
-
Sample
240328-czemeadb7w
-
MD5
8abc62378c07fa5207386eb330eea3c1
-
SHA1
2fab05fa3ca773e9b7b9c7c1ef1e7f2c633c7519
-
SHA256
a206e334022c32d06d937f6eb010cbc782684b6dd7d93e814b204e3b1bedd79d
-
SHA512
e7f0fe5ae81d53d0286b0a9462463fe0fdffd9e775498667ec7e03c01c1244d0601a06bb4f628bac62c1419e4f96665e5f85e18a79b39c3a3954290594d1d1b7
-
SSDEEP
768:g/TYCoIxdEk+AxoTZAZHFeq8b3UnLH9q3UELbUXfi6nVMQHI4vcGpvC:gECFd+A6YHAxwLWLRQZC
Malware Config
Extracted
mirai
LZRD
Targets
-
-
Target
a206e334022c32d06d937f6eb010cbc782684b6dd7d93e814b204e3b1bedd79d.elf
-
Size
45KB
-
MD5
8abc62378c07fa5207386eb330eea3c1
-
SHA1
2fab05fa3ca773e9b7b9c7c1ef1e7f2c633c7519
-
SHA256
a206e334022c32d06d937f6eb010cbc782684b6dd7d93e814b204e3b1bedd79d
-
SHA512
e7f0fe5ae81d53d0286b0a9462463fe0fdffd9e775498667ec7e03c01c1244d0601a06bb4f628bac62c1419e4f96665e5f85e18a79b39c3a3954290594d1d1b7
-
SSDEEP
768:g/TYCoIxdEk+AxoTZAZHFeq8b3UnLH9q3UELbUXfi6nVMQHI4vcGpvC:gECFd+A6YHAxwLWLRQZC
-
Modifies Watchdog functionality
Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.
-
Enumerates running processes
Discovers information about currently running processes on the system
-
Writes file to system bin folder
-