General
- Target nullnet.i686
- Size 64KB
- Sample260721-ae8zeabs7x
- SHA256 36f45b9dda0a2c4c963feb3e2bb2c61374084ec1de57f763753c85856e021dc0
- MD5 40399190f3c83b20dc4479c9fcdf4820
- SHA1 de560b5eb28b5c9b157626f39d381f02e5cd8f0c
- SHA512 b77db3bce59415471bc75684a1e2edc5eb601f8f90503302e25c83852d341aac391313d6aaf4ddc61ce2d890443e05534fcc7425f7ce486d8607119478fcfc81
- SSDEEP 1536:0bomEPzoY4f1dnaSpCJTjhgI+8Az05geqvIHosJWJuC3EVQf:00mELo/naJJGS5geqAH5WJu0
- TLSH T1C3532B86AA02DDB7CC1220F816A75765CA35F9323831B943F7E93EB5E4866C1D90339D
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
nullnet.i686
Resource
ubuntu1804-amd64-20260513-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target nullnet.i686
- Size 64KB
- SHA256 36f45b9dda0a2c4c963feb3e2bb2c61374084ec1de57f763753c85856e021dc0
- MD5 40399190f3c83b20dc4479c9fcdf4820
- SHA1 de560b5eb28b5c9b157626f39d381f02e5cd8f0c
- SHA512 b77db3bce59415471bc75684a1e2edc5eb601f8f90503302e25c83852d341aac391313d6aaf4ddc61ce2d890443e05534fcc7425f7ce486d8607119478fcfc81
- SSDEEP 1536:0bomEPzoY4f1dnaSpCJTjhgI+8Az05geqvIHosJWJuC3EVQf:00mELo/naJJGS5geqAH5WJu0
- TLSH T1C3532B86AA02DDB7CC1220F816A75765CA35F9323831B943F7E93EB5E4866C1D90339D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Modifies Watchdog functionality
Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.
-
Enumerates running processes
Discovers information about currently running processes on the system
-
Reads process memory
Read the memory of a process through the /proc virtual filesystem. This can be used to steal credentials.