General
-
Target
zmap.arm.elf
-
Size
74KB
-
Sample
241216-q3jbnaspfp
-
MD5
9784e8db8dae548a6593644e3a168579
-
SHA1
afa7c4ce4b0122ec5f22dc37aa7658f41cb01008
-
SHA256
4278fcf8ef5692822cc5eccce4857b5132f8d029949b83925a7a1e6f5c969129
-
SHA512
7f48ae6e910f87f70995c6373083c534670e2f66310e51e8a0b43bc01a31327e33a992b3ad50bc4956e4c9fb3c0845e6ca6aca2dbb014e66487a8338efe2eb6c
-
SSDEEP
1536:8x9OyMsgQJ9CisizmaD7QWAqsugL6AjvvZ:8xKsmaAWAAKRvZ
Behavioral task
behavioral1
Sample
zmap.arm.elf
Resource
debian9-armhf-20240729-en
Malware Config
Extracted
mirai
UNSTABLE
servers.vlrt-gap.com
Targets
-
-
Target
zmap.arm.elf
-
Size
74KB
-
MD5
9784e8db8dae548a6593644e3a168579
-
SHA1
afa7c4ce4b0122ec5f22dc37aa7658f41cb01008
-
SHA256
4278fcf8ef5692822cc5eccce4857b5132f8d029949b83925a7a1e6f5c969129
-
SHA512
7f48ae6e910f87f70995c6373083c534670e2f66310e51e8a0b43bc01a31327e33a992b3ad50bc4956e4c9fb3c0845e6ca6aca2dbb014e66487a8338efe2eb6c
-
SSDEEP
1536:8x9OyMsgQJ9CisizmaD7QWAqsugL6AjvvZ:8xKsmaAWAAKRvZ
Score7/10-
Deletes itself
-
Modifies Watchdog functionality
Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.
-
Writes file to system bin folder
-