General
- Target px86
- Size 135KB
- Sample261026-tsglvsbd97
- SHA256 68805da92456eb377426f890b7f95fcd7d5552f148fe033827d67566027f4cd7
- MD5 543f49fc500ada0ff17175ff99ceb6fe
- SHA1 92c13db8f74ef6e1504946ded770fbb37d0e2ecb
- SHA512 94ed3efa74104a1e46e5a6b00ce8b9784729b9bf91edd63c156e0d11c288889aa7e3d2d0e0219b85deae1521dd9e261bf42ac1d6a07900a04ab74ce400e615db
- SSDEEP 1536:SG8km125eo8TcDYcoHuScpJ4bKrMXrvt3/dkThFkMXZhoM2gowZYxcSBNR+oCooq:SGh9cLuFJ4+QvF/i3kMJhj2gexZJI8
- TLSH T1DED37DC1F643E0F5E99201F1103BB3219B76E436947BF751C7AB79329C62A409A2B36C
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
px86
Resource
ubuntu2204-amd64-20261019-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target px86
- Size 135KB
- SHA256 68805da92456eb377426f890b7f95fcd7d5552f148fe033827d67566027f4cd7
- MD5 543f49fc500ada0ff17175ff99ceb6fe
- SHA1 92c13db8f74ef6e1504946ded770fbb37d0e2ecb
- SHA512 94ed3efa74104a1e46e5a6b00ce8b9784729b9bf91edd63c156e0d11c288889aa7e3d2d0e0219b85deae1521dd9e261bf42ac1d6a07900a04ab74ce400e615db
- SSDEEP 1536:SG8km125eo8TcDYcoHuScpJ4bKrMXrvt3/dkThFkMXZhoM2gowZYxcSBNR+oCooq:SGh9cLuFJ4+QvF/i3kMJhj2gexZJI8
- TLSH T1DED37DC1F643E0F5E99201F1103BB3219B76E436947BF751C7AB79329C62A409A2B36C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Deletes itself
-
Modifies Watchdog functionality
Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.
-
Enumerates running processes
Discovers information about currently running processes on the system
-
Reads process memory
Read the memory of a process through the /proc virtual filesystem. This can be used to steal credentials.