General
-
Target
wind.arm7.elf
-
Size
45KB
-
Sample
250102-eym89svrgj
-
MD5
2783e361b89161f63de2ff6247a5a493
-
SHA1
b870328c8f8a4a2be4f6d279d6c486400254ef73
-
SHA256
7a15574774ebe273a94d072c3de699220e7b977e224fb50f172a95f8db07f768
-
SHA512
694bb82129773ca4078106fe0096f5b7bda4389170cdd953307fe43b08cf765bb7d3b78b75214262ef4307e73a25ca1d479205773d0656840682f9ded33f6dd2
-
SSDEEP
768:D/TYCoIxdEk+AxoTZAZHFeq8b36n29q3UELbUXfi6nVMQHI4vcGpv3:DECFd+A6YHAx6nbLRQZ3
Behavioral task
behavioral1
Sample
wind.arm7.elf
Resource
debian12-armhf-20240221-en
Malware Config
Extracted
mirai
LZRD
Targets
-
-
Target
wind.arm7.elf
-
Size
45KB
-
MD5
2783e361b89161f63de2ff6247a5a493
-
SHA1
b870328c8f8a4a2be4f6d279d6c486400254ef73
-
SHA256
7a15574774ebe273a94d072c3de699220e7b977e224fb50f172a95f8db07f768
-
SHA512
694bb82129773ca4078106fe0096f5b7bda4389170cdd953307fe43b08cf765bb7d3b78b75214262ef4307e73a25ca1d479205773d0656840682f9ded33f6dd2
-
SSDEEP
768:D/TYCoIxdEk+AxoTZAZHFeq8b36n29q3UELbUXfi6nVMQHI4vcGpv3:DECFd+A6YHAx6nbLRQZ3
Score10/10-
Mirai family
-
Modifies Watchdog functionality
Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.
-
Writes file to system bin folder
-