General
-
Target
SecuriteInfo.com.Linux.Siggen.9999.22592.3677.elf
-
Size
27KB
-
Sample
240804-zqe8xazeke
-
MD5
f76338bf877343248e69b4203721f187
-
SHA1
2c44bd069cf32b16177b92344c261627939caa41
-
SHA256
850957a9706b3ee80450690a521f48be22f131e06724c06f34331a24ff7c12dc
-
SHA512
12f6c86813e098b36f28893e8444c51742360da2870c15fb70fc116869deb8d5db64fd5569d1f31626b61339a4137b891d8472d1b052a58fc65bfb3a5373596b
-
SSDEEP
768:IA2Q2JNMn8oNUcGWha7Jw4JgGlzDpbuR1JP:p+I8o/0K4VJu5
Malware Config
Extracted
mirai
LZRD
Targets
-
-
Target
SecuriteInfo.com.Linux.Siggen.9999.22592.3677.elf
-
Size
27KB
-
MD5
f76338bf877343248e69b4203721f187
-
SHA1
2c44bd069cf32b16177b92344c261627939caa41
-
SHA256
850957a9706b3ee80450690a521f48be22f131e06724c06f34331a24ff7c12dc
-
SHA512
12f6c86813e098b36f28893e8444c51742360da2870c15fb70fc116869deb8d5db64fd5569d1f31626b61339a4137b891d8472d1b052a58fc65bfb3a5373596b
-
SSDEEP
768:IA2Q2JNMn8oNUcGWha7Jw4JgGlzDpbuR1JP:p+I8o/0K4VJu5
-
Modifies Watchdog functionality
Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.
-
Writes file to system bin folder
-