General
- Target nz.x86_64
- Size 166KB
- Sample260630-tddxesbs2r
- SHA256 7f2434b6821738e582d8d7ec70f66cc0e9da9eb80aac6eea3d2d0b486d1523bd
- MD5 5378e317cb5928f96794533293e50537
- SHA1 c15f5363b8b585566f397ac39789a0226c9816b7
- SHA512 352f550c0ae28320166ac5e4bb503e7e8a0901abebd134e48f9519f7ac08cbae8c44bf702d4b379323e77c9b8c2c44fee218fe8d83dfa048ac2a61f80db7649e
- SSDEEP 3072:SGRbzqCDLvqitaQL+2nKQ1sZy1AlWO3yivtku2kBvztd:SGxqCD+MGn3B2Gz
- TLSH T190F32A077AC1C9FFC496D1B847FFB536D921F86E0539718B6394BE921A09EE02A1C760
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
nz.x86_64
Resource
ubuntu1804-amd64-20260513-en
6 signatures
150 seconds
Malware Config
Extracted
Family
-
mirai
C2
-
sex.burnthem.xyz
Targets
-
- Target nz.x86_64
- Size 166KB
- SHA256 7f2434b6821738e582d8d7ec70f66cc0e9da9eb80aac6eea3d2d0b486d1523bd
- MD5 5378e317cb5928f96794533293e50537
- SHA1 c15f5363b8b585566f397ac39789a0226c9816b7
- SHA512 352f550c0ae28320166ac5e4bb503e7e8a0901abebd134e48f9519f7ac08cbae8c44bf702d4b379323e77c9b8c2c44fee218fe8d83dfa048ac2a61f80db7649e
- SSDEEP 3072:SGRbzqCDLvqitaQL+2nKQ1sZy1AlWO3yivtku2kBvztd:SGxqCD+MGn3B2Gz
- TLSH T190F32A077AC1C9FFC496D1B847FFB536D921F86E0539718B6394BE921A09EE02A1C760
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Modifies Watchdog functionality
Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.
-
Enumerates running processes
Discovers information about currently running processes on the system
-
Writes file to system bin folder