General
- Target debug.elf
- Size 39KB
- Sample251107-xtbc1sykfy
- SHA256 d0755b6d730ce1897a34e2de5c23eaf7eccc8fd2fee38a924a144290dfbd463e
- MD5 b8fd035ce30439eff03d8963ad5b0d56
- SHA1 52b13a65cf179d397cd720dd1bbb76ca1a334669
- SHA512 0519ebca44ee61add0049626956e84328efc0391c09b71a68d64e79535735a952bfab9602e1eddfbe466e5e8e26b488ead84fd816f750b27b6813055ebf4e044
- SSDEEP 768:9Sbw8FwnvKqLSnjiYOPurv80RBCpnd44uhnL7mU1S35RB8UnbcuyD7UHQRjR:0bn4LIMu80LQ64uhnv518RB8Unouy8Hi
- MD5 SHA1 SHA512 SSDEEP
Behavioral task
behavioral1
Sample
debug.elf
Resource
ubuntu1804-amd64-20250619-en
6 signatures
150 seconds
Malware Config
Extracted
Family
-
mirai
C2
-
teamc2.duckdns.org
Targets
-
- Target debug.elf
- Size 39KB
- SHA256 d0755b6d730ce1897a34e2de5c23eaf7eccc8fd2fee38a924a144290dfbd463e
- MD5 b8fd035ce30439eff03d8963ad5b0d56
- SHA1 52b13a65cf179d397cd720dd1bbb76ca1a334669
- SHA512 0519ebca44ee61add0049626956e84328efc0391c09b71a68d64e79535735a952bfab9602e1eddfbe466e5e8e26b488ead84fd816f750b27b6813055ebf4e044
- SSDEEP 768:9Sbw8FwnvKqLSnjiYOPurv80RBCpnd44uhnL7mU1S35RB8UnbcuyD7UHQRjR:0bn4LIMu80LQ64uhnv518RB8Unouy8Hi
- MD5 SHA1 SHA512 SSDEEP
Score10/10-
Mirai family
-
Modifies Watchdog functionality
Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.
-
Enumerates running processes
Discovers information about currently running processes on the system
-
Writes file to system bin folder