General
- Target debug.elf
- Size 113KB
- Sample260722-rnvltaszbx
- SHA256 70996d124cc491dbbb5d3ef62b061d607277fed3f312cce391ab3abf69d3deb7
- MD5 0e111067297b274325683230ce5ca916
- SHA1 2fc7651bf44022f5cdfc5b3263d88a47300c730e
- SHA512 3b0d8fc4a692e50e1aad4d63528e72d07db825866ccad0aeb43ceff0005f8072e90edbe2c0aef2eea8e016262ec795049ce8d1d592693e81d232a41dc932bf9a
- SSDEEP 3072:Lpe9zJgGmi+dkEF5nSMbUXMrDs3SUBNIHkCqB3:Lpe9zRx+dkE5nfg6wIHkCqB3
- TLSH T147B35BC5E247D0F9D81609302276FB375E76E1BB1329DA83D7F49A32AC12AC1D4167AC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
debug.elf
Resource
ubuntu1804-amd64-20260513-en
4 signatures
150 seconds
Malware Config
Extracted
Family
-
mirai
C2
-
cgur743.zapto.org
Targets
-
- Target debug.elf
- Size 113KB
- SHA256 70996d124cc491dbbb5d3ef62b061d607277fed3f312cce391ab3abf69d3deb7
- MD5 0e111067297b274325683230ce5ca916
- SHA1 2fc7651bf44022f5cdfc5b3263d88a47300c730e
- SHA512 3b0d8fc4a692e50e1aad4d63528e72d07db825866ccad0aeb43ceff0005f8072e90edbe2c0aef2eea8e016262ec795049ce8d1d592693e81d232a41dc932bf9a
- SSDEEP 3072:Lpe9zJgGmi+dkEF5nSMbUXMrDs3SUBNIHkCqB3:Lpe9zRx+dkE5nfg6wIHkCqB3
- TLSH T147B35BC5E247D0F9D81609302276FB375E76E1BB1329DA83D7F49A32AC12AC1D4167AC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Modifies Watchdog functionality
Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.
-
Enumerates running processes
Discovers information about currently running processes on the system
-
Writes file to system bin folder