General
-
Target
Satan.arm6.elf
-
Size
43KB
-
Sample
241115-2fx23ssph1
-
MD5
8698bf9d899c64879deddf9d754d3bac
-
SHA1
ca5978cd36092193718d4187508f938a0f58cc89
-
SHA256
2f32504a6fbefcfc0aeeed989ad4c812ebe207a987e79a4c25e590abef89cd98
-
SHA512
605330d6040cc04b1a0ce5d486145239da9eb5b3de7d59700802687b4cb853ed682f4e5d61f80fc29d21968d7f76ce982609575161beb79818a3ed0cc66597f2
-
SSDEEP
768:EnZOKj8x/QSQ3y/4qFTOdeoJWBhdYnjWcBWDW4s5GyZDa6XX4WUDb9q3UELB:yXwQSYPqFHI8rOjBn4+9DXPLB
Behavioral task
behavioral1
Sample
Satan.arm6.elf
Resource
debian9-armhf-20240611-en
Malware Config
Extracted
mirai
LZRD
Targets
-
-
Target
Satan.arm6.elf
-
Size
43KB
-
MD5
8698bf9d899c64879deddf9d754d3bac
-
SHA1
ca5978cd36092193718d4187508f938a0f58cc89
-
SHA256
2f32504a6fbefcfc0aeeed989ad4c812ebe207a987e79a4c25e590abef89cd98
-
SHA512
605330d6040cc04b1a0ce5d486145239da9eb5b3de7d59700802687b4cb853ed682f4e5d61f80fc29d21968d7f76ce982609575161beb79818a3ed0cc66597f2
-
SSDEEP
768:EnZOKj8x/QSQ3y/4qFTOdeoJWBhdYnjWcBWDW4s5GyZDa6XX4WUDb9q3UELB:yXwQSYPqFHI8rOjBn4+9DXPLB
Score10/10-
Mirai family
-
Modifies Watchdog functionality
Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.
-
Enumerates running processes
Discovers information about currently running processes on the system
-
Writes file to system bin folder
-