General
- Target debug.elf
- Size 113KB
- Sample260724-h2xhwsfa35
- SHA256 30d5bb9a96ad6cb0d73aca9dc6307a6c62f9a7f666ae7cdcdf1db995375c1c01
- MD5 6361d955476f58e887406892e0096c15
- SHA1 206aa40efa531b0ae39fa9db379701e804e0671a
- SHA512 0c7eefca66c2629bac14cb0f2efd7a2ffe4a7b1c2d6373b5d51199bfbac5459bdf0074b99bd2da59c24ab41313588c04aec92d7fbaad787273ce4fba73b67091
- SSDEEP 3072:vKDYTd+7F2pEXMtOABsGjnluLlAw5EDI9/rFPHICmBL:vKDYTw70EXMUA5jlCA8pPHICmBL
- TLSH T1F7B34AC5E243D0F9DD6605306172FB3BAD76E0FA132DDA82E3B58A72B8226C1D41675C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
debug.elf
Resource
ubuntu1804-amd64-20260513-en
4 signatures
150 seconds
Malware Config
Extracted
Family
-
mirai
C2
-
osfjkqoiw382r552q.hopto.org
Targets
-
- Target debug.elf
- Size 113KB
- SHA256 30d5bb9a96ad6cb0d73aca9dc6307a6c62f9a7f666ae7cdcdf1db995375c1c01
- MD5 6361d955476f58e887406892e0096c15
- SHA1 206aa40efa531b0ae39fa9db379701e804e0671a
- SHA512 0c7eefca66c2629bac14cb0f2efd7a2ffe4a7b1c2d6373b5d51199bfbac5459bdf0074b99bd2da59c24ab41313588c04aec92d7fbaad787273ce4fba73b67091
- SSDEEP 3072:vKDYTd+7F2pEXMtOABsGjnluLlAw5EDI9/rFPHICmBL:vKDYTw70EXMUA5jlCA8pPHICmBL
- TLSH T1F7B34AC5E243D0F9DD6605306172FB3BAD76E0FA132DDA82E3B58A72B8226C1D41675C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Modifies Watchdog functionality
Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.
-
Enumerates running processes
Discovers information about currently running processes on the system
-
Writes file to system bin folder