General
- Target debug.elf
- Size 113KB
- Sample260803-bejvyszybw
- SHA256 4d8329523495fd8ff834bd5ec68964ca7eb896010abcebb4238dff3900d7f63b
- MD5 bf077e4bba64c807686980efcad7b4b5
- SHA1 45c49a97ab3971468aedd0dfa11359df98693173
- SHA512 fe734e8247d431336881f503a3dcc0671282569d0b73a60d05c55bd57b649bd19b12a56e4216f1f0b9af484c6584f3195a9df77fe57f39cadfafca04df0a7d02
- SSDEEP 3072:ONyJqCDagG4/4NRWFR7+66Ul8zDs3SUBN1H0CFB3:ayJqCiq4NRGR7RzQw1H0CFB3
- TLSH T194B35AC5E247D0F9D91209302276FB375E76E1BB1329DA83D7F49A32AC12AC1D4167AC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
debug.elf
Resource
ubuntu1804-amd64-20260513-en
4 signatures
150 seconds
Malware Config
Extracted
Family
-
mirai
C2
-
s3o65awrf56.net
Targets
-
- Target debug.elf
- Size 113KB
- SHA256 4d8329523495fd8ff834bd5ec68964ca7eb896010abcebb4238dff3900d7f63b
- MD5 bf077e4bba64c807686980efcad7b4b5
- SHA1 45c49a97ab3971468aedd0dfa11359df98693173
- SHA512 fe734e8247d431336881f503a3dcc0671282569d0b73a60d05c55bd57b649bd19b12a56e4216f1f0b9af484c6584f3195a9df77fe57f39cadfafca04df0a7d02
- SSDEEP 3072:ONyJqCDagG4/4NRWFR7+66Ul8zDs3SUBN1H0CFB3:ayJqCiq4NRGR7RzQw1H0CFB3
- TLSH T194B35AC5E247D0F9D91209302276FB375E76E1BB1329DA83D7F49A32AC12AC1D4167AC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Modifies Watchdog functionality
Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.
-
Enumerates running processes
Discovers information about currently running processes on the system
-
Writes file to system bin folder