General
-
Target
zmap.arm.elf
-
Size
74KB
-
Sample
241213-k971pstnbt
-
MD5
173d8fde74b8598b83bb68514fac4e63
-
SHA1
f6617abc60331750a8ab74f3094b113f1fc72469
-
SHA256
598cf678d1a594529cc1568b82096bebcfa390889aecf634c9baa8f9055c9c53
-
SHA512
4669f0a93d3230570bf12c918cab81863affabcd1719c4ac3700da2905ba4f636b312ed2c1394624e9c96e5ef3110db87dd3c9b0266ea9175896513d02eac7b4
-
SSDEEP
1536:ax0KyMsOfJ9CvsbOFSL2rBXWqFnvpWs9vvv:axRqFSL2FXW+Bfvv
Behavioral task
behavioral1
Sample
zmap.arm.elf
Resource
debian9-armhf-20240729-en
Malware Config
Extracted
mirai
UNSTABLE
schools.meal-data.com
Targets
-
-
Target
zmap.arm.elf
-
Size
74KB
-
MD5
173d8fde74b8598b83bb68514fac4e63
-
SHA1
f6617abc60331750a8ab74f3094b113f1fc72469
-
SHA256
598cf678d1a594529cc1568b82096bebcfa390889aecf634c9baa8f9055c9c53
-
SHA512
4669f0a93d3230570bf12c918cab81863affabcd1719c4ac3700da2905ba4f636b312ed2c1394624e9c96e5ef3110db87dd3c9b0266ea9175896513d02eac7b4
-
SSDEEP
1536:ax0KyMsOfJ9CvsbOFSL2rBXWqFnvpWs9vvv:axRqFSL2FXW+Bfvv
Score7/10-
Deletes itself
-
Modifies Watchdog functionality
Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.
-
Writes file to system bin folder
-