General
- Target x86.elf
- Size 49KB
- Sample260708-xym8dagv4x
- SHA256 1b9c73c1e4dfc4643ac50d78af99963e0adc9e28ca35cb5f38fbb01293ee40a2
- MD5 5c41c9663e689e75256858dd3c1613da
- SHA1 ee02e4052bbaa9bfed2a4956bca6ced65325d1a7
- SHA512 efe770a7868ac870ba4911d409a4afaea6f99bc59b0dcfa298db1c8f97f1516599bbcf306ee1d9d058ca1b9ec7087d8a0f33769795adf87f36e8bde9102a9c3d
- SSDEEP 1536:kPF1+1QwMSsBI8Ga+C6bdUYZ6qcqgEfJNc92Yrzq:kf+1QwMSsBI8Ga+7bVZ6qGEfPg2
- TLSH T1883349C4F547E8F8DD4B16746032FB379A72F1BB236CDA43D7A95533A841642E802A9C
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
x86.elf
Resource
ubuntu1804-amd64-20260513-en
4 signatures
150 seconds
Malware Config
Extracted
Family
-
mirai
Botnet
-
LZRD
Targets
-
- Target x86.elf
- Size 49KB
- SHA256 1b9c73c1e4dfc4643ac50d78af99963e0adc9e28ca35cb5f38fbb01293ee40a2
- MD5 5c41c9663e689e75256858dd3c1613da
- SHA1 ee02e4052bbaa9bfed2a4956bca6ced65325d1a7
- SHA512 efe770a7868ac870ba4911d409a4afaea6f99bc59b0dcfa298db1c8f97f1516599bbcf306ee1d9d058ca1b9ec7087d8a0f33769795adf87f36e8bde9102a9c3d
- SSDEEP 1536:kPF1+1QwMSsBI8Ga+C6bdUYZ6qcqgEfJNc92Yrzq:kf+1QwMSsBI8Ga+7bVZ6qGEfPg2
- TLSH T1883349C4F547E8F8DD4B16746032FB379A72F1BB236CDA43D7A95533A841642E802A9C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Modifies Watchdog functionality
Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.
-
Enumerates running processes
Discovers information about currently running processes on the system
-
Writes file to system bin folder