General
- Target debug.elf
- Size 113KB
- Sample260709-qdwkpab19w
- SHA256 291cae94061f1986ce9eb51261fbdc09538b3297f4081b4b9084c664f8a19b8f
- MD5 ff91c58b7d1f9aab24301075a9973dc8
- SHA1 3c3580571e389032ba9702053daeb0c0dc53c850
- SHA512 f5691a040ba51305c8c0c167f21084ac26c8ae454f98ee48172c27abaed995306482b89fbbf05e5fd367b80002e8df12345078f07719c1a06f558e3eb23e30d9
- SSDEEP 3072:vpe9zJgGmi+dkEF5nSMnayRDb4ySUBNIHoCtBX:vpe9zRx+dkE5nfaZwIHoCtBX
- TLSH T156B35BC5E247D0F9D8120A302276FB375E76E17B1329DA83D7F49A72AC12AC1D4167AC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
debug.elf
Resource
ubuntu1804-amd64-20260513-en
4 signatures
150 seconds
Malware Config
Extracted
Family
-
mirai
C2
-
oqwlkbwl3wt65gwskl.hopto.org
Targets
-
- Target debug.elf
- Size 113KB
- SHA256 291cae94061f1986ce9eb51261fbdc09538b3297f4081b4b9084c664f8a19b8f
- MD5 ff91c58b7d1f9aab24301075a9973dc8
- SHA1 3c3580571e389032ba9702053daeb0c0dc53c850
- SHA512 f5691a040ba51305c8c0c167f21084ac26c8ae454f98ee48172c27abaed995306482b89fbbf05e5fd367b80002e8df12345078f07719c1a06f558e3eb23e30d9
- SSDEEP 3072:vpe9zJgGmi+dkEF5nSMnayRDb4ySUBNIHoCtBX:vpe9zRx+dkE5nfaZwIHoCtBX
- TLSH T156B35BC5E247D0F9D8120A302276FB375E76E17B1329DA83D7F49A72AC12AC1D4167AC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Modifies Watchdog functionality
Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.
-
Enumerates running processes
Discovers information about currently running processes on the system
-
Writes file to system bin folder