General
-
Target
zmap.x86.elf
-
Size
61KB
-
Sample
241216-sr14favjhr
-
MD5
d1f752879420a6d45d76f130281392d6
-
SHA1
46a92c0efae33b8a826dc48daa3dbf3d30be4a15
-
SHA256
4fc42ee2d91d577e0bcc49c27d5f3936584ad49c27b5032baa57a6c6e53b4914
-
SHA512
91e7beb1157bf75f4e73459eb2ab003005aa591848698451ee6dc79764570bf2d8a253c25dda6346b657367844048cd21be38b6485d169e373e8455b2d586225
-
SSDEEP
1536:1BGfyT5OGMMt4cesUTeFIv5TzHhWKg80CIjOepn20:1caT5OGMMtmaATzBWKp07Kanp
Behavioral task
behavioral1
Sample
zmap.x86.elf
Resource
ubuntu2004-amd64-20241127-en
Malware Config
Extracted
mirai
UNSTABLE
servers.vlrt-gap.com
Targets
-
-
Target
zmap.x86.elf
-
Size
61KB
-
MD5
d1f752879420a6d45d76f130281392d6
-
SHA1
46a92c0efae33b8a826dc48daa3dbf3d30be4a15
-
SHA256
4fc42ee2d91d577e0bcc49c27d5f3936584ad49c27b5032baa57a6c6e53b4914
-
SHA512
91e7beb1157bf75f4e73459eb2ab003005aa591848698451ee6dc79764570bf2d8a253c25dda6346b657367844048cd21be38b6485d169e373e8455b2d586225
-
SSDEEP
1536:1BGfyT5OGMMt4cesUTeFIv5TzHhWKg80CIjOepn20:1caT5OGMMtmaATzBWKp07Kanp
Score7/10-
Deletes itself
-
Modifies Watchdog functionality
Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.
-
Writes file to system bin folder
-