General
- Target x86.elf
- Size 155KB
- Sample260810-mdkawafe23
- SHA256 5a73ac1265512d75eb2a65a941e062f680b3581c295ab13403d097f8cc3f40af
- MD5 6d01cd8007ad4b23ee7470d9e0928834
- SHA1 06cc11260439c02b391fb3676ddea396011896bc
- SHA512 08f2b9ed94b486a449c3d227d9a2c8aa521a20505150e2dffcb1a4c0285bc4afc305c3dee1b00a7ea8377ff91a8831957c37e3ea7951ded73283e3a2f369b854
- SSDEEP 3072:JLIxaXdi+w3/tQeFghXxBaX593ReY2aSrIvwPzQIC+:JLIxaXM+2/TFgdkRB2+wPzHC+
- TLSH T14BF36D80F313E2F6D84704B0617BEB339A359556511BEEC2D374DF35EC62912CA1AA9C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
x86.elf
Resource
ubuntu1804-amd64-20260513-en
3 signatures
150 seconds
Malware Config
Extracted
Family
-
mirai
Botnet
-
DEMONS
C2
-
privrawmirai.privnetwork.tech
Targets
-
- Target x86.elf
- Size 155KB
- SHA256 5a73ac1265512d75eb2a65a941e062f680b3581c295ab13403d097f8cc3f40af
- MD5 6d01cd8007ad4b23ee7470d9e0928834
- SHA1 06cc11260439c02b391fb3676ddea396011896bc
- SHA512 08f2b9ed94b486a449c3d227d9a2c8aa521a20505150e2dffcb1a4c0285bc4afc305c3dee1b00a7ea8377ff91a8831957c37e3ea7951ded73283e3a2f369b854
- SSDEEP 3072:JLIxaXdi+w3/tQeFghXxBaX593ReY2aSrIvwPzQIC+:JLIxaXM+2/TFgdkRB2+wPzHC+
- TLSH T14BF36D80F313E2F6D84704B0617BEB339A359556511BEEC2D374DF35EC62912CA1AA9C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Modifies Watchdog functionality
Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.
-
Writes file to system bin folder