General
- Target debug.elf
- Size 113KB
- Sample260804-g3dlqsshka
- SHA256 b46ddd583aacf603b9521a361024cbda1e73353bbd04f2a60b5fd005c6deeee1
- MD5 6c70f490bfcd740922717db1aa56b365
- SHA1 344d2fb176359fd029e09a9ff1477140cd0d82af
- SHA512 df88eda075e809d9cf622825314e2356ff8d69b3b98b4252c9a5b11789f6e884a0cfc3a753f3658371bf6fd631bb7f0791648f5ad439a08f64648882e2adcce6
- SSDEEP 3072:LZMQCBJGnZW+I41MFlrKp0xrYNUJdBNoHxgQCtB3UJ:LZMQCG0+I418YpIZoHxgQCtB3UJ
- TLSH T132B35AC5E247D0F9DC5609302276FB375E76E1BB1229CA83D7F49A32AC12AC1D4167AC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
debug.elf
Resource
ubuntu1804-amd64-20260513-en
4 signatures
150 seconds
Malware Config
Extracted
Family
-
mirai
C2
-
s3o65awrf56.net
Targets
-
- Target debug.elf
- Size 113KB
- SHA256 b46ddd583aacf603b9521a361024cbda1e73353bbd04f2a60b5fd005c6deeee1
- MD5 6c70f490bfcd740922717db1aa56b365
- SHA1 344d2fb176359fd029e09a9ff1477140cd0d82af
- SHA512 df88eda075e809d9cf622825314e2356ff8d69b3b98b4252c9a5b11789f6e884a0cfc3a753f3658371bf6fd631bb7f0791648f5ad439a08f64648882e2adcce6
- SSDEEP 3072:LZMQCBJGnZW+I41MFlrKp0xrYNUJdBNoHxgQCtB3UJ:LZMQCG0+I418YpIZoHxgQCtB3UJ
- TLSH T132B35AC5E247D0F9DC5609302276FB375E76E1BB1229CA83D7F49A32AC12AC1D4167AC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Modifies Watchdog functionality
Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.
-
Enumerates running processes
Discovers information about currently running processes on the system
-
Writes file to system bin folder