General
- Target rjfe686.elf
- Size 113KB
- Sample250331-vd1a4awn19
- SHA256 5cb9afdac19b41e4eaa53a9fb816afee8208bdb8ca47588d274a828a3298404f
- MD5 78df1803adf327b71a3851470b5dea86
- SHA1 f4fdb0f8edf0918c8961bfcf087792733e94d5cf
- SHA512 9528019403e6bf17a17cd017d10d2d1805589089573bf83efe7fdb340bcec4b7b1ebc02de1e9b89c51a6383041865bc20babcaa854052bd6ae21ea30886130ec
- SSDEEP 1536:YtX3GVIeGbIJlnMRykheIuqq12eBIMft32m2YyvW6o9yF0ECn4Xkem7ZN4lhZUFa:YtXheGkJIyIG/BlftmcDkFpdXkMUF1
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Behavioral task
behavioral1
Sample
rjfe686.elf
Resource
ubuntu2204-amd64-20250307-en
5 signatures
150 seconds
Malware Config
Extracted
Family
-
mirai
C2
-
raw.awaken-network.net
-
141.98.10.142
Targets
-
- Target rjfe686.elf
- Size 113KB
- SHA256 5cb9afdac19b41e4eaa53a9fb816afee8208bdb8ca47588d274a828a3298404f
- MD5 78df1803adf327b71a3851470b5dea86
- SHA1 f4fdb0f8edf0918c8961bfcf087792733e94d5cf
- SHA512 9528019403e6bf17a17cd017d10d2d1805589089573bf83efe7fdb340bcec4b7b1ebc02de1e9b89c51a6383041865bc20babcaa854052bd6ae21ea30886130ec
- SSDEEP 1536:YtX3GVIeGbIJlnMRykheIuqq12eBIMft32m2YyvW6o9yF0ECn4Xkem7ZN4lhZUFa:YtXheGkJIyIG/BlftmcDkFpdXkMUF1
- MD5 SHA1 SHA512 SSDEEP
Score7/10-
Deletes itself
-
Enumerates running processes
Discovers information about currently running processes on the system
-
Reads process memory
Read the memory of a process through the /proc virtual filesystem. This can be used to steal credentials.