General
-
Target
byte.arm7.elf
-
Size
164KB
-
Sample
250116-f5eq5svqfq
-
MD5
264d6a037c20fae4556400afe0e6459a
-
SHA1
41cae096d0484c7745acbbdc350c377045ec614c
-
SHA256
98b2307793b57c4451aa0ce8b77aa933f704a2868bf280ed5a77e59fe5c23f84
-
SHA512
d8f08d3fb24608a8d29c2abde7b45cef3cc56ed2cafb894ddbb053f5242c5fbc600cc053008718d3d9e75f974102fd41e928b3d516650cb5b84b1fce507bb3ba
-
SSDEEP
3072:HUvDiabnHkiS3AalhgyCv/097HjvNMI4vM++ewAM/9lnVao:HUvmabHMAalhgyCHo3NsM++eTM/9ln4o
Behavioral task
behavioral1
Sample
byte.arm7.elf
Resource
debian9-armhf-20240729-en
Malware Config
Extracted
mirai
LZRD
Targets
-
-
Target
byte.arm7.elf
-
Size
164KB
-
MD5
264d6a037c20fae4556400afe0e6459a
-
SHA1
41cae096d0484c7745acbbdc350c377045ec614c
-
SHA256
98b2307793b57c4451aa0ce8b77aa933f704a2868bf280ed5a77e59fe5c23f84
-
SHA512
d8f08d3fb24608a8d29c2abde7b45cef3cc56ed2cafb894ddbb053f5242c5fbc600cc053008718d3d9e75f974102fd41e928b3d516650cb5b84b1fce507bb3ba
-
SSDEEP
3072:HUvDiabnHkiS3AalhgyCv/097HjvNMI4vM++ewAM/9lnVao:HUvmabHMAalhgyCHo3NsM++eTM/9ln4o
Score7/10-
Modifies Watchdog functionality
Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.
-
Enumerates running processes
Discovers information about currently running processes on the system
-