General
- Target nz.x86
- Size 45KB
- Sample260809-ajjkbaga32
- SHA256 86a98b0a9d3b4cba259ace302a120d0ed77561198f3e6a17b855f4ebd4bbbb50
- MD5 8c1753f1e623b2f86696ff8c977cc2ab
- SHA1 550fefb4ef0d83bb9ce864ae5550a2c0517f3a32
- SHA512 84170e9ca915c9fd66d22b79fde3fc8671c132f0c10a83f07ab6ceb2b0cafbb07c710131254fa6cc5ad8140aaa5a3af8aaf188028e70b3b8c098cd6e98ae0dfb
- SSDEEP 768:xW/211RfNpnT98qYlOuPzPbKSWRatqLs0HY41EFmpN1IpC7w/e6WEnbcuyD7UHQo:ffHNsOWbKSWRcqg0HY41EFIN1IpC7wvj
- TLSH T12523F1F9B2E7FBD4E8B6307C60EA751F5C6014AA6A084DD71ED0F06B44ACF953838061
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
nz.x86
Resource
ubuntu1804-amd64-20260513-en
5 signatures
150 seconds
Malware Config
Extracted
Family
-
mirai
C2
-
s3o65awrf56.net
Targets
-
- Target nz.x86
- Size 45KB
- SHA256 86a98b0a9d3b4cba259ace302a120d0ed77561198f3e6a17b855f4ebd4bbbb50
- MD5 8c1753f1e623b2f86696ff8c977cc2ab
- SHA1 550fefb4ef0d83bb9ce864ae5550a2c0517f3a32
- SHA512 84170e9ca915c9fd66d22b79fde3fc8671c132f0c10a83f07ab6ceb2b0cafbb07c710131254fa6cc5ad8140aaa5a3af8aaf188028e70b3b8c098cd6e98ae0dfb
- SSDEEP 768:xW/211RfNpnT98qYlOuPzPbKSWRatqLs0HY41EFmpN1IpC7w/e6WEnbcuyD7UHQo:ffHNsOWbKSWRcqg0HY41EFIN1IpC7wvj
- TLSH T12523F1F9B2E7FBD4E8B6307C60EA751F5C6014AA6A084DD71ED0F06B44ACF953838061
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies Watchdog functionality
Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.
-
Enumerates running processes
Discovers information about currently running processes on the system
-
Writes file to system bin folder