General
-
Target
f7c7141d081cddf63d71eb722d0ef2ca.bin
-
Size
72KB
-
Sample
250103-cae7msvjex
-
MD5
e1bd03e0b042db86b92e6ae81742f2a7
-
SHA1
9f284a6262f964dd5dd7a0093f781061e20afadd
-
SHA256
36b766ba4c98660905ef7e3e6d22a07576c48017e0df39102ae28148ac2a7fdd
-
SHA512
9e90474c49e7166e02c616ae03071888be89946011f19c4aec4d43d30c0540c30531b9beb4fe46412b75d493c6d8045ca360b6022934fa7039bbe0fae8bd4604
-
SSDEEP
1536:ExIpFjMCMzqm7ASdz4VoDxK/w751zc8MFeGNmvQLA1mkSChikGJ:Ex6FjHMemsS5aoDWk5G5sQVkSpx
Behavioral task
behavioral1
Sample
e3e0e99c4d08f0af5becc66530373e636ddcf01cf9c37bfe3e79a45caf902bce.elf
Resource
debian12-armhf-20240729-en
Malware Config
Extracted
mirai
MIRAI
Targets
-
-
Target
e3e0e99c4d08f0af5becc66530373e636ddcf01cf9c37bfe3e79a45caf902bce.elf
-
Size
168KB
-
MD5
f7c7141d081cddf63d71eb722d0ef2ca
-
SHA1
78b8bf89c41558dc3bc3778cc553604b99b4e958
-
SHA256
e3e0e99c4d08f0af5becc66530373e636ddcf01cf9c37bfe3e79a45caf902bce
-
SHA512
ab8c683d8f1eca439593a697705879612b6d8c03f06a97f49b90db4e2a5be6d292d519407f2180c9429f1cdf476857921c36c4e8fdb7fb7733b7ee25a7583ceb
-
SSDEEP
3072:UqwG+C1QTlrI1fXUjtaBkZzOQEPox/la4OosRMDjjWOagM/9QegU9:UqwGKrwfkpaBkZzOQEQx/Q4AqjjWOhMV
-
Deletes itself
-
Modifies Watchdog functionality
Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.
-
Modifies systemd
Adds/ modifies systemd service files. Likely to achieve persistence.
-
MITRE ATT&CK Enterprise v15
Persistence
Boot or Logon Autostart Execution
1XDG Autostart Entries
1Create or Modify System Process
1Systemd Service
1