General
-
Target
c97db15d01a460ca3f27cb912aa72c04db96a5df0c6e7acb907bb398798264e4.elf
-
Size
45KB
-
Sample
250118-fkq9fatlfz
-
MD5
b581104f04391b06fcd7d773588c88f0
-
SHA1
d4a8f136f68a69c52b4d77d3c66e1c2f6cc4ba78
-
SHA256
c97db15d01a460ca3f27cb912aa72c04db96a5df0c6e7acb907bb398798264e4
-
SHA512
70c2a2f19b2e35507e85ac9de8b8a2658502c2f600ddc0e46d84c80619596c1598b7126ba5e657ac2b134f3c1794a8590df2d62155db9ad0096a92e545e260dc
-
SSDEEP
768:D/TYCoIxdEk+AxoTZAZHFeq8b3pi9q3UELbUXfi6nVMQHI4vcGpvM:DECFd+A6YHAxpXLRQZM
Behavioral task
behavioral1
Sample
c97db15d01a460ca3f27cb912aa72c04db96a5df0c6e7acb907bb398798264e4.elf
Resource
debian9-armhf-20240729-en
Malware Config
Extracted
mirai
LZRD
Targets
-
-
Target
c97db15d01a460ca3f27cb912aa72c04db96a5df0c6e7acb907bb398798264e4.elf
-
Size
45KB
-
MD5
b581104f04391b06fcd7d773588c88f0
-
SHA1
d4a8f136f68a69c52b4d77d3c66e1c2f6cc4ba78
-
SHA256
c97db15d01a460ca3f27cb912aa72c04db96a5df0c6e7acb907bb398798264e4
-
SHA512
70c2a2f19b2e35507e85ac9de8b8a2658502c2f600ddc0e46d84c80619596c1598b7126ba5e657ac2b134f3c1794a8590df2d62155db9ad0096a92e545e260dc
-
SSDEEP
768:D/TYCoIxdEk+AxoTZAZHFeq8b3pi9q3UELbUXfi6nVMQHI4vcGpvM:DECFd+A6YHAxpXLRQZM
Score10/10-
Mirai family
-
Modifies Watchdog functionality
Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.
-
Enumerates running processes
Discovers information about currently running processes on the system
-
Writes file to system bin folder
-