General
-
Target
1588011ef23105ad68b4168534175d84.elf
-
Size
32KB
-
Sample
240520-xzd14ade29
-
MD5
1588011ef23105ad68b4168534175d84
-
SHA1
2cb7ba21a60245fa7e4d63e565072adc35186071
-
SHA256
c299fcbb537bcaafbff331bf5369858ffa3a6a7d988884bffe8d6d0facb86921
-
SHA512
3e293bf6c4d3387ea2eea6f20ffa477aca06cd526d42180bc7631481596535bcc3d24a1e45748803404d1dbcf05f84d26d9495a1aedfae45004f7c9409907594
-
SSDEEP
768:pNscAALmcIy55uOF+VfanRVsYpgJkq0trM9:pNR/4oAOoCKYpgCtM
Malware Config
Extracted
mirai
LZRD
Targets
-
-
Target
1588011ef23105ad68b4168534175d84.elf
-
Size
32KB
-
MD5
1588011ef23105ad68b4168534175d84
-
SHA1
2cb7ba21a60245fa7e4d63e565072adc35186071
-
SHA256
c299fcbb537bcaafbff331bf5369858ffa3a6a7d988884bffe8d6d0facb86921
-
SHA512
3e293bf6c4d3387ea2eea6f20ffa477aca06cd526d42180bc7631481596535bcc3d24a1e45748803404d1dbcf05f84d26d9495a1aedfae45004f7c9409907594
-
SSDEEP
768:pNscAALmcIy55uOF+VfanRVsYpgJkq0trM9:pNR/4oAOoCKYpgCtM
-
Modifies Watchdog functionality
Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.
-
Enumerates running processes
Discovers information about currently running processes on the system
-
Writes file to system bin folder
-