General
-
Target
na.elf
-
Size
23KB
-
Sample
241012-g55g8ssdpj
-
MD5
506ddfc3e5aca187e25a5999e5a1831d
-
SHA1
b1d3848f7ba1aa7623dfbc847d8dacbca5638efd
-
SHA256
a9645840ed9e516a7929525539cb3f750e2176ee5a63a6ab5edc67b9857e85cc
-
SHA512
cace551488dfaf502f64dad0e72ce8114c89b09be173b1f8b5b25f2f707676f2b2a4563364de8a14e43c90745718faa4c56085be05b4afde2468b1b6d1bda9f8
-
SSDEEP
384:YeD8ZSH2LLZUYyGZbsOiTFdrd44YiTGeuCqlQCXHpKJjA19eoFmdtJgGlzDpH7uW:YeD8ZSWvZHZbs1Fx+1iTGeZqlQCXoJss
Behavioral task
behavioral1
Sample
na.elf
Resource
debian9-mipsbe-20240418-en
Malware Config
Extracted
mirai
LZRD
Targets
-
-
Target
na.elf
-
Size
23KB
-
MD5
506ddfc3e5aca187e25a5999e5a1831d
-
SHA1
b1d3848f7ba1aa7623dfbc847d8dacbca5638efd
-
SHA256
a9645840ed9e516a7929525539cb3f750e2176ee5a63a6ab5edc67b9857e85cc
-
SHA512
cace551488dfaf502f64dad0e72ce8114c89b09be173b1f8b5b25f2f707676f2b2a4563364de8a14e43c90745718faa4c56085be05b4afde2468b1b6d1bda9f8
-
SSDEEP
384:YeD8ZSH2LLZUYyGZbsOiTFdrd44YiTGeuCqlQCXHpKJjA19eoFmdtJgGlzDpH7uW:YeD8ZSWvZHZbs1Fx+1iTGeZqlQCXoJss
Score10/10-
Modifies Watchdog functionality
Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.
-
Enumerates running processes
Discovers information about currently running processes on the system
-
Writes file to system bin folder
-