General
- Target bin.x86_64.elf
- Size 80KB
- Sample261028-x4kdnsts7q
- SHA256 9040574f84aebe4bf6b43dea0a85cbc592864b18406006169533869210213fb1
- MD5 9b1d83adff16b4e48bd03e7f652efd8a
- SHA1 c380b359f7fd028e7cb2608fec592cc842d52d02
- SHA512 67ef118ad0b37d9201203adc70a6c99d2043dfd6ec9d955673b524d84fd7f5a05b043f0b1336b277e0d17f1a83a0fb901783fcfe372adf7592968fb7fbeddae9
- SSDEEP 1536:yGpPBpZWA+wokYdj7OybvsYEqM8kda7/b8J5q0cZaITc6S8SLqmUQQUQfxT1:LPBpAhwokYdbvYj9t5XITcVqmUQQUQfH
- TLSH T101831B07B5C289FDC45AD27026AE7D36DC22F4BE0379B19B37C0BB253C5DE611A1AA05
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
bin.x86_64.elf
Resource
ubuntu1804-amd64-20261019-en
5 signatures
150 seconds
Malware Config
Extracted
Family
-
mirai
Botnet
-
DEMONS
Targets
-
- Target bin.x86_64.elf
- Size 80KB
- SHA256 9040574f84aebe4bf6b43dea0a85cbc592864b18406006169533869210213fb1
- MD5 9b1d83adff16b4e48bd03e7f652efd8a
- SHA1 c380b359f7fd028e7cb2608fec592cc842d52d02
- SHA512 67ef118ad0b37d9201203adc70a6c99d2043dfd6ec9d955673b524d84fd7f5a05b043f0b1336b277e0d17f1a83a0fb901783fcfe372adf7592968fb7fbeddae9
- SSDEEP 1536:yGpPBpZWA+wokYdj7OybvsYEqM8kda7/b8J5q0cZaITc6S8SLqmUQQUQfxT1:LPBpAhwokYdbvYj9t5XITcVqmUQQUQfH
- TLSH T101831B07B5C289FDC45AD27026AE7D36DC22F4BE0379B19B37C0BB253C5DE611A1AA05
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10Contacts a large (538572) amount of remote hosts
This may indicate a network scan to discover remotely running services.
Creates a large amount of network flows
This may indicate a network scan to discover remotely running services.
Modifies Watchdog functionality
Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.
Writes file to system bin folder