General
-
Target
zmap.arm7.elf
-
Size
152KB
-
Sample
241101-q9h98ssqbm
-
MD5
229acf7569130751dd54b01eb3804958
-
SHA1
7885cfb3f6bb30be8c87ffc365527c31b5e86649
-
SHA256
4a6596028c781e73e24157ca252361eaae4be9307ad98c34586880b48b7d9df8
-
SHA512
00edb3c2b6fe3874487ac82f83cf7d1a33e3b18512bbb7cdc36a6fc7640971c459b2874d254a6db65cca19d6e222170bdd7275283005bb4269a80c3dac4d890b
-
SSDEEP
3072:gXNsG9xNku05aoanAE+zRzHnbNc57VMzLLSO4PFM/9h7TBA:gXNsiEudoanL+zRzHbNyoLS7dM/9Zy
Behavioral task
behavioral1
Sample
zmap.arm7.elf
Resource
debian12-armhf-20240221-en
Malware Config
Extracted
mirai
UNSTABLE
Targets
-
-
Target
zmap.arm7.elf
-
Size
152KB
-
MD5
229acf7569130751dd54b01eb3804958
-
SHA1
7885cfb3f6bb30be8c87ffc365527c31b5e86649
-
SHA256
4a6596028c781e73e24157ca252361eaae4be9307ad98c34586880b48b7d9df8
-
SHA512
00edb3c2b6fe3874487ac82f83cf7d1a33e3b18512bbb7cdc36a6fc7640971c459b2874d254a6db65cca19d6e222170bdd7275283005bb4269a80c3dac4d890b
-
SSDEEP
3072:gXNsG9xNku05aoanAE+zRzHnbNc57VMzLLSO4PFM/9h7TBA:gXNsiEudoanL+zRzHbNyoLS7dM/9Zy
Score7/10-
Deletes itself
-
Modifies Watchdog functionality
Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.
-
Writes file to system bin folder
-