General
-
Target
zmap.arm7.elf
-
Size
152KB
-
Sample
241213-k971pstnbs
-
MD5
9ce68a667c961a44758e17f18e39419d
-
SHA1
94e93cd72a812771cb287774caec8db0620778a5
-
SHA256
17d8a0966c1b3e904e9a38c0bc508575744fe2c83c0eced9ab9c1b78a4d2977d
-
SHA512
1714462669e8ddb172e2f54b026c2044678916da69e9d8a247ec43806331c29296a800e7e7e0c1d557672bb2897490020072d006b8f0dd47f4708b2ec9a10f05
-
SSDEEP
3072:gXNsG9xNku03aoanAE+zRzHnbNc57VMzzLSO4PFM/9h7TBA:gXNsiEuToanL+zRzHbNyYLS7dM/9Zy
Behavioral task
behavioral1
Sample
zmap.arm7.elf
Resource
debian12-armhf-20240418-en
Malware Config
Extracted
mirai
UNSTABLE
Targets
-
-
Target
zmap.arm7.elf
-
Size
152KB
-
MD5
9ce68a667c961a44758e17f18e39419d
-
SHA1
94e93cd72a812771cb287774caec8db0620778a5
-
SHA256
17d8a0966c1b3e904e9a38c0bc508575744fe2c83c0eced9ab9c1b78a4d2977d
-
SHA512
1714462669e8ddb172e2f54b026c2044678916da69e9d8a247ec43806331c29296a800e7e7e0c1d557672bb2897490020072d006b8f0dd47f4708b2ec9a10f05
-
SSDEEP
3072:gXNsG9xNku03aoanAE+zRzHnbNc57VMzzLSO4PFM/9h7TBA:gXNsiEuToanL+zRzHbNyYLS7dM/9Zy
Score7/10-
Deletes itself
-
Modifies Watchdog functionality
Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.
-
Writes file to system bin folder
-