Analysis
-
max time kernel
131s -
max time network
150s -
platform
ubuntu-24.04_amd64 -
resource
ubuntu2404-amd64-20250307-en -
resource tags
arch:amd64arch:i386image:ubuntu2404-amd64-20250307-enkernel:6.8.0-31-genericlocale:en-usos:ubuntu-24.04-amd64system -
submitted
10/03/2025, 02:22
Behavioral task
behavioral1
Sample
5d86114045619d1d7dffc82a1f9f10ea7d26cdb5759eef8de48642ef4cd1802b.elf
Resource
ubuntu2404-amd64-20250307-en
3 signatures
150 seconds
General
-
Target
5d86114045619d1d7dffc82a1f9f10ea7d26cdb5759eef8de48642ef4cd1802b.elf
-
Size
43KB
-
MD5
bcd4c131acd85c62c41deb575bcd3e59
-
SHA1
5bfb7a979e878e647002ae34852afba1e40793e9
-
SHA256
5d86114045619d1d7dffc82a1f9f10ea7d26cdb5759eef8de48642ef4cd1802b
-
SHA512
88bba909f555f5ba67fc3e1ef14d4e72a2b79e6de79c68f21bd7b328b758bcdd3fa58e10ecae846e01597f2ce3652e654a6173bbcff3b5ae93642c40ed1b51e5
-
SSDEEP
768:u7Val26HnOx37iu0k0FSA8Aa0EzS5GHjgiyZskrQbEo1lfdDUhuMHTM+TGx072ZJ:uQlDHsLimMnBCS5GDgVZcEonFAhuK6bH
Score
10/10
Malware Config
Extracted
Family
mirai
Botnet
LZRD
Signatures
-
Mirai family
-
Modifies Watchdog functionality 1 TTPs 2 IoCs
Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.
description ioc Process File opened for modification /dev/watchdog 5d86114045619d1d7dffc82a1f9f10ea7d26cdb5759eef8de48642ef4cd1802b.elf File opened for modification /dev/misc/watchdog 5d86114045619d1d7dffc82a1f9f10ea7d26cdb5759eef8de48642ef4cd1802b.elf