General
-
Target
SecuriteInfo.com.Linux.Siggen.9999.29052.16568.elf
-
Size
23KB
-
Sample
240423-bwvc1sah83
-
MD5
b97106bf094029ad01e7e9ae85a21546
-
SHA1
c39cc1ff0f8fd1180dda4d14794865242e10643b
-
SHA256
32d6aff2c09b262b2d82759a2e8240d248d78836024f7197692c155c21c490ec
-
SHA512
6aaf8e04298a54ee53214ce3b1a6c5eeae4966a8278d5a897318252af267fa308191ed0c1a9ae27f20fabd7b3937a4f58598323fab13085221ed4f58303fa13f
-
SSDEEP
384:M5B6Yj833S7YSpsGE0m1SAqMaECTS2llsFMP3mrXcTc5cb5rFldGSzwv01JZie5A:M3j8tB0m1SAiTxv0qmrMQ8dGCwv1eFY
Malware Config
Extracted
mirai
LZRD
Targets
-
-
Target
SecuriteInfo.com.Linux.Siggen.9999.29052.16568.elf
-
Size
23KB
-
MD5
b97106bf094029ad01e7e9ae85a21546
-
SHA1
c39cc1ff0f8fd1180dda4d14794865242e10643b
-
SHA256
32d6aff2c09b262b2d82759a2e8240d248d78836024f7197692c155c21c490ec
-
SHA512
6aaf8e04298a54ee53214ce3b1a6c5eeae4966a8278d5a897318252af267fa308191ed0c1a9ae27f20fabd7b3937a4f58598323fab13085221ed4f58303fa13f
-
SSDEEP
384:M5B6Yj833S7YSpsGE0m1SAqMaECTS2llsFMP3mrXcTc5cb5rFldGSzwv01JZie5A:M3j8tB0m1SAiTxv0qmrMQ8dGCwv1eFY
-
Modifies Watchdog functionality
Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.
-
Enumerates running processes
Discovers information about currently running processes on the system
-
Writes file to system bin folder
-