General
-
Target
ac22fda1f003519b5c039fa381ba6ee5894baa35565c64990ab955dd61c8b99d.elf
-
Size
30KB
-
Sample
240810-bz2aqsteld
-
MD5
c37a184d60c58f3724be2ccf4b6d48ba
-
SHA1
35a63f29ea98a63d9a1ba3d073a8de67cdd3c6f8
-
SHA256
ac22fda1f003519b5c039fa381ba6ee5894baa35565c64990ab955dd61c8b99d
-
SHA512
90dd6409ba6ee25813d7b71964b02145a1bdf431c535ceb3415006d6da7f71a03c28d1cf332ea30c48652b0564a9884929d95426ef737c5f72ac7a0bb046da49
-
SSDEEP
768:HEcInx6ray/LOkCsrzgCWbMFkfTiizJgGlzDpbuR1J9:HxInxWQsr0tMFK+gVJuL
Malware Config
Extracted
mirai
LZRD
Targets
-
-
Target
ac22fda1f003519b5c039fa381ba6ee5894baa35565c64990ab955dd61c8b99d.elf
-
Size
30KB
-
MD5
c37a184d60c58f3724be2ccf4b6d48ba
-
SHA1
35a63f29ea98a63d9a1ba3d073a8de67cdd3c6f8
-
SHA256
ac22fda1f003519b5c039fa381ba6ee5894baa35565c64990ab955dd61c8b99d
-
SHA512
90dd6409ba6ee25813d7b71964b02145a1bdf431c535ceb3415006d6da7f71a03c28d1cf332ea30c48652b0564a9884929d95426ef737c5f72ac7a0bb046da49
-
SSDEEP
768:HEcInx6ray/LOkCsrzgCWbMFkfTiizJgGlzDpbuR1J9:HxInxWQsr0tMFK+gVJuL
-
Contacts a large (16563) amount of remote hosts
This may indicate a network scan to discover remotely running services.
-
Creates a large amount of network flows
This may indicate a network scan to discover remotely running services.
-
Modifies Watchdog functionality
Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.
-