General
- Target debug.dbg
- Size 206KB
- Sample260813-plashsytfx
- SHA256 3ee840bc79a034e38e1f4d42a19fbdc7cf50bea0581bbcdbd92149b6009fbf90
- MD5 66dc4b523db5481edcce69bc856d2eca
- SHA1 1097f2f04ed77e5103bbcd0e0dbb0652720f5c8c
- SHA512 c58b90dec1522e1084c84113ea121e26c0f5b71a94aa2b7c7173d43ce8c9addde3336cc1f682a070c0dae13941061f139c2c4eab965f62cf074894491529b5e5
- SSDEEP 3072:k/FB4S0H8ZXe12K37QDGXeEv2Rnyo890dVT/9d/fbvq4Cym8iiwbi:k/r4S0H8ZajrmbqojHyJLMwu
- TLSH T1E3245C47B98190FFC08AC1785BEAE436E971B0AD527CB25B23D49F262D4DE711F2DA40
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
debug.dbg
Resource
ubuntu1804-amd64-20260513-en
3 signatures
150 seconds
Malware Config
Extracted
Family
-
mirai
Botnet
-
DEMONS
C2
-
manbipll.duckdns.org
Targets
-
- Target debug.dbg
- Size 206KB
- SHA256 3ee840bc79a034e38e1f4d42a19fbdc7cf50bea0581bbcdbd92149b6009fbf90
- MD5 66dc4b523db5481edcce69bc856d2eca
- SHA1 1097f2f04ed77e5103bbcd0e0dbb0652720f5c8c
- SHA512 c58b90dec1522e1084c84113ea121e26c0f5b71a94aa2b7c7173d43ce8c9addde3336cc1f682a070c0dae13941061f139c2c4eab965f62cf074894491529b5e5
- SSDEEP 3072:k/FB4S0H8ZXe12K37QDGXeEv2Rnyo890dVT/9d/fbvq4Cym8iiwbi:k/r4S0H8ZajrmbqojHyJLMwu
- TLSH T1E3245C47B98190FFC08AC1785BEAE436E971B0AD527CB25B23D49F262D4DE711F2DA40
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Modifies Watchdog functionality
Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.
-
Writes file to system bin folder