General
- Target jaffacakes118_bd54cbdaf0d3df903beebe319bca533586727377fb01a486731b87b90894c652.bin
- Size 23KB
- Sample260922-l73tmsde75
- SHA256 bd54cbdaf0d3df903beebe319bca533586727377fb01a486731b87b90894c652
- MD5 0781666456245e7c3a4b0dfb102b805e
- SHA1 1c1b9ec9dd558151fef23e54cbc72a464fb4fc43
- SHA512 422ec6ccb589c02f9f12a3d0fda7d8dd75a08856e824d9b8226bf457be5f37728e17812bbac778354ebbb63267d69f0990f5a89d3678df2df1763fe1d18bb827
- SSDEEP 384:6eD8ZSH2LLZUYyGZbsOiTrowSN9rnZMINlphQ/HYtui1ebmd1JgGlzDpH7uNj1JC:6eD8ZSWvZHZbs1row697qohQvg914i1N
- TLSH T193B2E03D1B161B98EA1EC0BD839D0B513CB41B3591829D8B6207EDD7AF968747013BE8
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
jaffacakes118_bd54cbdaf0d3df903beebe319bca533586727377fb01a486731b87b90894c652.bin
Resource
debian9-mipsbe-20260513-en
4 signatures
150 seconds
Malware Config
Extracted
Family
-
mirai
Botnet
-
LZRD
C2
-
5.252.177.240
Targets
-
- Target jaffacakes118_bd54cbdaf0d3df903beebe319bca533586727377fb01a486731b87b90894c652.bin
- Size 23KB
- SHA256 bd54cbdaf0d3df903beebe319bca533586727377fb01a486731b87b90894c652
- MD5 0781666456245e7c3a4b0dfb102b805e
- SHA1 1c1b9ec9dd558151fef23e54cbc72a464fb4fc43
- SHA512 422ec6ccb589c02f9f12a3d0fda7d8dd75a08856e824d9b8226bf457be5f37728e17812bbac778354ebbb63267d69f0990f5a89d3678df2df1763fe1d18bb827
- SSDEEP 384:6eD8ZSH2LLZUYyGZbsOiTrowSN9rnZMINlphQ/HYtui1ebmd1JgGlzDpH7uNj1JC:6eD8ZSWvZHZbs1row697qohQvg914i1N
- TLSH T193B2E03D1B161B98EA1EC0BD839D0B513CB41B3591829D8B6207EDD7AF968747013BE8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies Watchdog functionality
Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.
-
Writes file to system bin folder