General
- Target nz.i686.elf
- Size 117KB
- Sample260718-aayb4shx6m
- SHA256 c1dd7a5673962d108ec8d1b12b50604a134cc52cc95de6c3bbf680198e8f9cb6
- MD5 706896c05dcea348215278389689beb8
- SHA1 f37c3668c8fbbc7ab69e31f9fc9cc929c26a2a1d
- SHA512 a8f1bfa1fa833ceb456e26467432bde9cb5fc4074a5ceef189d553e490587436d1e84d42b40b077944a9924c19eef4b209906c2aaf6650ce1eea4895245c894b
- SSDEEP 3072:6FjlzYNVoZXRgn4c30tItERjnDBBMesWrhK8HR:mYNVoZhkD3OItYzDjw8HR
- TLSH T1D9C33BC0F98B81F6C40B88305166F73FDB7198A95123DA9DEF999F72DA73582912234C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
nz.i686.elf
Resource
ubuntu1804-amd64-20260513-en
4 signatures
150 seconds
Malware Config
Extracted
Family
-
mirai
C2
-
jkqhdbbbqwiujkaz.hopto.org
Targets
-
- Target nz.i686.elf
- Size 117KB
- SHA256 c1dd7a5673962d108ec8d1b12b50604a134cc52cc95de6c3bbf680198e8f9cb6
- MD5 706896c05dcea348215278389689beb8
- SHA1 f37c3668c8fbbc7ab69e31f9fc9cc929c26a2a1d
- SHA512 a8f1bfa1fa833ceb456e26467432bde9cb5fc4074a5ceef189d553e490587436d1e84d42b40b077944a9924c19eef4b209906c2aaf6650ce1eea4895245c894b
- SSDEEP 3072:6FjlzYNVoZXRgn4c30tItERjnDBBMesWrhK8HR:mYNVoZhkD3OItYzDjw8HR
- TLSH T1D9C33BC0F98B81F6C40B88305166F73FDB7198A95123DA9DEF999F72DA73582912234C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Modifies Watchdog functionality
Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.
-
Enumerates running processes
Discovers information about currently running processes on the system
-
Writes file to system bin folder