General
-
Target
d995822d452a92285cfe97658c2ee62f8f8fd55439d6daf84b06c84ab6196d14.elf
-
Size
33KB
-
Sample
241231-dhbpvstpcy
-
MD5
0a88c4f37f94f22f13ba7fbafc59f8db
-
SHA1
b49ac1f54aacc8fd24b6db3206ce9082a0528492
-
SHA256
d995822d452a92285cfe97658c2ee62f8f8fd55439d6daf84b06c84ab6196d14
-
SHA512
e8b68041bc6fedd20a7a468fe8b401502438eec4186d34e9df6e51af0890d77987106d405bbbc1fa1a344ca1056a225833d1cb1c11ea5a2771db3c8c88fbd129
-
SSDEEP
768:QyqTG+N2S+JiE0o0u/ygPTXiz3ljvUCLTyz0MmV5i5dwO1TmJgGlzDpbuR1JUz:wfN2GE0U/vPTXiRjtL60McAaMSVJuKz
Malware Config
Extracted
mirai
e.xijinping.mov
Targets
-
-
Target
d995822d452a92285cfe97658c2ee62f8f8fd55439d6daf84b06c84ab6196d14.elf
-
Size
33KB
-
MD5
0a88c4f37f94f22f13ba7fbafc59f8db
-
SHA1
b49ac1f54aacc8fd24b6db3206ce9082a0528492
-
SHA256
d995822d452a92285cfe97658c2ee62f8f8fd55439d6daf84b06c84ab6196d14
-
SHA512
e8b68041bc6fedd20a7a468fe8b401502438eec4186d34e9df6e51af0890d77987106d405bbbc1fa1a344ca1056a225833d1cb1c11ea5a2771db3c8c88fbd129
-
SSDEEP
768:QyqTG+N2S+JiE0o0u/ygPTXiz3ljvUCLTyz0MmV5i5dwO1TmJgGlzDpbuR1JUz:wfN2GE0U/vPTXiRjtL60McAaMSVJuKz
-
Mirai family
-
Deletes itself
-
Traces itself
Traces itself to prevent debugging attempts
-
Writes file to system bin folder
-