General
-
Target
Satan.arm.elf
-
Size
38KB
-
Sample
241123-xzcg9syjdq
-
MD5
c6a8c79e2ebbc90f4cf47f4810daadd3
-
SHA1
093908067e7d575412aca9eb3f34c1ce4320715c
-
SHA256
acef8177afcd54f929fc30ce23f884dc92855db67aa693392049082fc055047e
-
SHA512
2c71a52a9a7968137143f4e9f404542a7aa6f107d431f186a442b1ab515222cce69c12bfdb5f4b0ab7252e1cf9880f73ae479d6e5f00699b11f653eaae73b949
-
SSDEEP
768:2ufHR8HXrbu1pVi1lCIxeP7v4AAZPbfbW7eH+pFs3UozNW:BHSbbu1pVKC6ez4tdbf67bIzNW
Behavioral task
behavioral1
Sample
Satan.arm.elf
Resource
debian9-armhf-20240418-en
Malware Config
Extracted
mirai
LZRD
Targets
-
-
Target
Satan.arm.elf
-
Size
38KB
-
MD5
c6a8c79e2ebbc90f4cf47f4810daadd3
-
SHA1
093908067e7d575412aca9eb3f34c1ce4320715c
-
SHA256
acef8177afcd54f929fc30ce23f884dc92855db67aa693392049082fc055047e
-
SHA512
2c71a52a9a7968137143f4e9f404542a7aa6f107d431f186a442b1ab515222cce69c12bfdb5f4b0ab7252e1cf9880f73ae479d6e5f00699b11f653eaae73b949
-
SSDEEP
768:2ufHR8HXrbu1pVi1lCIxeP7v4AAZPbfbW7eH+pFs3UozNW:BHSbbu1pVKC6ez4tdbf67bIzNW
Score10/10-
Mirai family
-
Modifies Watchdog functionality
Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.
-
Enumerates running processes
Discovers information about currently running processes on the system
-
Writes file to system bin folder
-