General
-
Target
023a49b27d0b741a27487cc730e2289da4170336dc2c106db22e8fa3864d3c02.elf
-
Size
153KB
-
Sample
240727-bc6lyawerm
-
MD5
88e66d3ffdb78ac36dec93f81f898ad1
-
SHA1
70383254c1f54b1401ba28ca982cc08b8a8f8cc5
-
SHA256
023a49b27d0b741a27487cc730e2289da4170336dc2c106db22e8fa3864d3c02
-
SHA512
0a00edfdac538586177dedb64df0fb28421b05220ae9a050c158ccdae929fab537637aa6011909793b428c34cb8fdbd630ef2471b563b5c584a621fe14e52b3e
-
SSDEEP
3072:HNaEkEJoa9niU5yae9xfKqF6bBtUKKRsSY6rOYLYM/9iAn9Q:HNa09iWyae9xfKq2BifdY6rOY8M/9Z9Q
Malware Config
Extracted
mirai
BOTNET
cyberbotne.stresse.live
Targets
-
-
Target
023a49b27d0b741a27487cc730e2289da4170336dc2c106db22e8fa3864d3c02.elf
-
Size
153KB
-
MD5
88e66d3ffdb78ac36dec93f81f898ad1
-
SHA1
70383254c1f54b1401ba28ca982cc08b8a8f8cc5
-
SHA256
023a49b27d0b741a27487cc730e2289da4170336dc2c106db22e8fa3864d3c02
-
SHA512
0a00edfdac538586177dedb64df0fb28421b05220ae9a050c158ccdae929fab537637aa6011909793b428c34cb8fdbd630ef2471b563b5c584a621fe14e52b3e
-
SSDEEP
3072:HNaEkEJoa9niU5yae9xfKqF6bBtUKKRsSY6rOYLYM/9iAn9Q:HNa09iWyae9xfKq2BifdY6rOY8M/9Z9Q
-
Contacts a large (112103) amount of remote hosts
This may indicate a network scan to discover remotely running services.
-
Creates a large amount of network flows
This may indicate a network scan to discover remotely running services.
-
Modifies Watchdog functionality
Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.
-
Enumerates running processes
Discovers information about currently running processes on the system
-