General
-
Target
ak.arm7-20220923-0709.elf
-
Size
63KB
-
Sample
220923-hzdb8sddg6
-
MD5
83cd8ec8e55033cfba82c4113de55c92
-
SHA1
e2b53993de813c9e862daca170ee5ddb732f5d91
-
SHA256
5f01ab6289f0e71e5c0b8468d0c0001d0d18d4449b1f511a624c93d40ad9479d
-
SHA512
cce0b36e8c1c2fd35e7f67bb81a22d16373c456c91b41bf13db534f3a70e851455a74e62ba4499cb1c087a66af5051a7842a33d8bc1d4094ffd3f48df2eabefc
-
SSDEEP
1536:kkOp4ZCmSJ3SWLjZfYXmx0zoRkLg4zsi6F0:iKZCrVZfYp8kLg4s0
Static task
static1
Behavioral task
behavioral1
Sample
ak.arm7-20220923-0709.elf
Resource
debian9-armhf-en-20211208
Malware Config
Targets
-
-
Target
ak.arm7-20220923-0709.elf
-
Size
63KB
-
MD5
83cd8ec8e55033cfba82c4113de55c92
-
SHA1
e2b53993de813c9e862daca170ee5ddb732f5d91
-
SHA256
5f01ab6289f0e71e5c0b8468d0c0001d0d18d4449b1f511a624c93d40ad9479d
-
SHA512
cce0b36e8c1c2fd35e7f67bb81a22d16373c456c91b41bf13db534f3a70e851455a74e62ba4499cb1c087a66af5051a7842a33d8bc1d4094ffd3f48df2eabefc
-
SSDEEP
1536:kkOp4ZCmSJ3SWLjZfYXmx0zoRkLg4zsi6F0:iKZCrVZfYp8kLg4s0
Score9/10-
Contacts a large (43826) amount of remote hosts
This may indicate a network scan to discover remotely running services.
-
Creates a large amount of network flows
This may indicate a network scan to discover remotely running services.
-
Modifies the Watchdog daemon
Malware like Mirai modify the Watchdog to prevent it restarting an infected system.
-
Reads runtime system information
Reads data from /proc virtual filesystem.
-
Writes file to tmp directory
Malware often drops required files in the /tmp directory.
-