General
- Target SwiftSec.mips.elf
- Size 23KB
- Sample241206-qjdl3ayqdy
- SHA256 7f46cc4adbe3d3801c2a92ef0a433efa38ba983227a158910a2f7d9c124a5ec4
- MD5 1f48dd331d55c1b4063c620ee90c741b
- SHA1 ba1b11f7e58767712bdc9579dccf3b928e829b42
- SHA512 c3e919e5bed69ea4c0fb1e99b0edcc006f15d1c2ef57a65a4ba3b7727869db0d4f9fedac4c1ad7084fe0681eccf0d0eddd10a08f347ecc78cc8f723bd8d17819
- SSDEEP 384:neD8ZSH2LLZUYyGZbsOiTrowSN9rnZMINlphQ/HYtuiuPmdzJgGlzDpH7uNj1JAE:neD8ZSWvZHZbs1row697qohQvg9uPizw
- MD5 SHA1 SHA512 SSDEEP
Behavioral task
behavioral1
Sample
SwiftSec.mips.elf
Resource
debian9-mipsbe-20240611-en
7 signatures
150 seconds
Malware Config
Extracted
Family
-
mirai
Botnet
-
LZRD
Targets
-
- Target SwiftSec.mips.elf
- Size 23KB
- SHA256 7f46cc4adbe3d3801c2a92ef0a433efa38ba983227a158910a2f7d9c124a5ec4
- MD5 1f48dd331d55c1b4063c620ee90c741b
- SHA1 ba1b11f7e58767712bdc9579dccf3b928e829b42
- SHA512 c3e919e5bed69ea4c0fb1e99b0edcc006f15d1c2ef57a65a4ba3b7727869db0d4f9fedac4c1ad7084fe0681eccf0d0eddd10a08f347ecc78cc8f723bd8d17819
- SSDEEP 384:neD8ZSH2LLZUYyGZbsOiTrowSN9rnZMINlphQ/HYtuiuPmdzJgGlzDpH7uNj1JAE:neD8ZSWvZHZbs1row697qohQvg9uPizw
- MD5 SHA1 SHA512 SSDEEP
Score10/10-
Mirai family
-
Modifies Watchdog functionality
Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.
-
Enumerates running processes
Discovers information about currently running processes on the system
-
Writes file to system bin folder