General
- Target px86
- Size 130KB
- Sample260813-am895swva1
- SHA256 979bd80a9ffde500946e02911d2824eab5fb25c265086b6569e6fff6977d21a6
- MD5 3499d06114e8a6ec77c68a861af98c4d
- SHA1 b71a4be437ad29517f92c9932052ef93d7a9869a
- SHA512 280564a9ef2c2efb5ee1ded7c4504208ab40b209150b33d823c79f875b44668ae008a992d23fdfdfd53274096f036ab3a3710f9c3ffdd778698dca4c8b47bbb3
- SSDEEP 3072:itqlV/o6aopCtw4EX4HHTfmqx1Gyx0Jhf:itI/DGtnldxQo0L
- TLSH T1CBD39FC1E743D0F5E85205F0103BA7318B7AD53A943AEB96D7A93E31AC62A419B1B35C
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
px86
Resource
ubuntu1804-amd64-20260513-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target px86
- Size 130KB
- SHA256 979bd80a9ffde500946e02911d2824eab5fb25c265086b6569e6fff6977d21a6
- MD5 3499d06114e8a6ec77c68a861af98c4d
- SHA1 b71a4be437ad29517f92c9932052ef93d7a9869a
- SHA512 280564a9ef2c2efb5ee1ded7c4504208ab40b209150b33d823c79f875b44668ae008a992d23fdfdfd53274096f036ab3a3710f9c3ffdd778698dca4c8b47bbb3
- SSDEEP 3072:itqlV/o6aopCtw4EX4HHTfmqx1Gyx0Jhf:itI/DGtnldxQo0L
- TLSH T1CBD39FC1E743D0F5E85205F0103BA7318B7AD53A943AEB96D7A93E31AC62A419B1B35C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Deletes itself
-
Modifies Watchdog functionality
Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.
-
Enumerates running processes
Discovers information about currently running processes on the system
-
Reads process memory
Read the memory of a process through the /proc virtual filesystem. This can be used to steal credentials.