General
-
Target
camp.arm7.elf
-
Size
60KB
-
Sample
250111-2qh1xavqhp
-
MD5
c50ecdec197ebefe1029061c6035b7a0
-
SHA1
0a5792448cfc8993eac469a77a2f58b2d2f9892b
-
SHA256
9ffe24af76cb6bfd845b71da575c0a90cbc0a0e4fe2e3686fe6c8d43addbfceb
-
SHA512
d9b8da1791dc14c0fdffdb8e49a76fbc4dca10e5d9a38accbb5bc6ed370cfdcc9285354d3bf0d0d519540682bb9fdbf00327d1f8763a61dcd341532d6fba8e27
-
SSDEEP
1536:gVQSmwtMJXmejtgYeTLTM5Tfv83KJ2crl2EWB:gVywt8XZgLgTX83KHl2EWB
Behavioral task
behavioral1
Sample
camp.arm7.elf
Resource
debian9-armhf-20240729-en
Malware Config
Extracted
mirai
LZRD
Targets
-
-
Target
camp.arm7.elf
-
Size
60KB
-
MD5
c50ecdec197ebefe1029061c6035b7a0
-
SHA1
0a5792448cfc8993eac469a77a2f58b2d2f9892b
-
SHA256
9ffe24af76cb6bfd845b71da575c0a90cbc0a0e4fe2e3686fe6c8d43addbfceb
-
SHA512
d9b8da1791dc14c0fdffdb8e49a76fbc4dca10e5d9a38accbb5bc6ed370cfdcc9285354d3bf0d0d519540682bb9fdbf00327d1f8763a61dcd341532d6fba8e27
-
SSDEEP
1536:gVQSmwtMJXmejtgYeTLTM5Tfv83KJ2crl2EWB:gVywt8XZgLgTX83KHl2EWB
Score10/10-
Mirai family
-
Modifies Watchdog functionality
Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.
-
Enumerates running processes
Discovers information about currently running processes on the system
-
Writes file to system bin folder
-