General
-
Target
716c82c534a179738785e0917dde43f24d1ca1fb8a0a1826b651126aa46d1e26.elf
-
Size
261KB
-
Sample
241211-c9cksssmhz
-
MD5
ad2c77b76858b10ea25fb39d61d857e5
-
SHA1
46cbc2ca9c592506e5c8791bf42aff8164ade4b8
-
SHA256
716c82c534a179738785e0917dde43f24d1ca1fb8a0a1826b651126aa46d1e26
-
SHA512
d054467396d1a0a447398f58f9567cb5966355664ee4be9d39b7a94546e259b38927b86ea510ccb16a787617e7b219047fac38f00e7920db80f6c2c5d91c98f3
-
SSDEEP
6144:7uF6+0bzq3bWc+a6rHOQUldy+PhwRMe20pLM/RJmv2RZ6TUPP:780vQWc+a6rHOQUGyypg/3mvmZ6TgP
Behavioral task
behavioral1
Sample
716c82c534a179738785e0917dde43f24d1ca1fb8a0a1826b651126aa46d1e26.elf
Resource
debian12-armhf-20240221-en
Malware Config
Extracted
mirai
MIRAI
something.catchat.us
Targets
-
-
Target
716c82c534a179738785e0917dde43f24d1ca1fb8a0a1826b651126aa46d1e26.elf
-
Size
261KB
-
MD5
ad2c77b76858b10ea25fb39d61d857e5
-
SHA1
46cbc2ca9c592506e5c8791bf42aff8164ade4b8
-
SHA256
716c82c534a179738785e0917dde43f24d1ca1fb8a0a1826b651126aa46d1e26
-
SHA512
d054467396d1a0a447398f58f9567cb5966355664ee4be9d39b7a94546e259b38927b86ea510ccb16a787617e7b219047fac38f00e7920db80f6c2c5d91c98f3
-
SSDEEP
6144:7uF6+0bzq3bWc+a6rHOQUldy+PhwRMe20pLM/RJmv2RZ6TUPP:780vQWc+a6rHOQUGyypg/3mvmZ6TgP
Score9/10-
Contacts a large (130687) amount of remote hosts
This may indicate a network scan to discover remotely running services.
-
Creates a large amount of network flows
This may indicate a network scan to discover remotely running services.
-
File and Directory Permissions Modification
Adversaries may modify file or directory permissions to evade defenses.
-
Modifies Watchdog functionality
Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.
-