General
-
Target
Satan.arm6.elf
-
Size
43KB
-
Sample
241123-ybsp1ssnex
-
MD5
58547a61a8ad34a0e69573e12a56bc5f
-
SHA1
4d9232993bdf468b1025af78d6d975d8ddd15234
-
SHA256
3483982941be89334ca28c6dc294a7c12c49e1d42291430bfbd24dff3ad0456a
-
SHA512
b7b83e62628e7b4586d43abf144f5098b72ad994c28bfedc8afd4b4e99ec4c1f4d315d533b899b19f25bbbefc7ebdc4e8c5153f5ffafa5ffcef0c7005120d5fe
-
SSDEEP
768:kTZ4toDjBLyguMkAA9zwXWhkdspjKnIf4v1jwr3cCXlXgj9q3UELSm:cbhIaPEVxKgc1jq3cOgiLJ
Behavioral task
behavioral1
Sample
Satan.arm6.elf
Resource
debian12-armhf-20240221-en
Malware Config
Extracted
mirai
LZRD
Targets
-
-
Target
Satan.arm6.elf
-
Size
43KB
-
MD5
58547a61a8ad34a0e69573e12a56bc5f
-
SHA1
4d9232993bdf468b1025af78d6d975d8ddd15234
-
SHA256
3483982941be89334ca28c6dc294a7c12c49e1d42291430bfbd24dff3ad0456a
-
SHA512
b7b83e62628e7b4586d43abf144f5098b72ad994c28bfedc8afd4b4e99ec4c1f4d315d533b899b19f25bbbefc7ebdc4e8c5153f5ffafa5ffcef0c7005120d5fe
-
SSDEEP
768:kTZ4toDjBLyguMkAA9zwXWhkdspjKnIf4v1jwr3cCXlXgj9q3UELSm:cbhIaPEVxKgc1jq3cOgiLJ
Score10/10-
Mirai family
-
Modifies Watchdog functionality
Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.
-
Enumerates running processes
Discovers information about currently running processes on the system
-
Writes file to system bin folder
-