General
-
Target
pecga.arm7.elf
-
Size
152KB
-
Sample
250116-w6lh3stncm
-
MD5
aa623a7ded9c8f3e0703637779e97887
-
SHA1
31e9d9babc2d04e5dc81bd53fe5ef9bd5ee6d341
-
SHA256
99be4837165eee0bbec6ad073cfcf8de68020c01fefabc4549848839139b3a84
-
SHA512
5e72f7126a7941ac6ecfab30ad8d1d0cbd6694964982ec77aa3202a45e391edcb46c6ba19bc99c8e5e824bffdaea151533be48da1dec0ded6732d80df8d91510
-
SSDEEP
3072:8p3NgmkftmD6SdrDaDmbBjH/WVSGjU8bvmSh7uM/9KDBA:8p3Ngr8DXXaDmbBjH+VAMmShaM/96y
Behavioral task
behavioral1
Sample
pecga.arm7.elf
Resource
debian9-armhf-20240611-en
Malware Config
Extracted
mirai
UNSTABLE
Targets
-
-
Target
pecga.arm7.elf
-
Size
152KB
-
MD5
aa623a7ded9c8f3e0703637779e97887
-
SHA1
31e9d9babc2d04e5dc81bd53fe5ef9bd5ee6d341
-
SHA256
99be4837165eee0bbec6ad073cfcf8de68020c01fefabc4549848839139b3a84
-
SHA512
5e72f7126a7941ac6ecfab30ad8d1d0cbd6694964982ec77aa3202a45e391edcb46c6ba19bc99c8e5e824bffdaea151533be48da1dec0ded6732d80df8d91510
-
SSDEEP
3072:8p3NgmkftmD6SdrDaDmbBjH/WVSGjU8bvmSh7uM/9KDBA:8p3Ngr8DXXaDmbBjH+VAMmShaM/96y
Score7/10-
Deletes itself
-
Modifies Watchdog functionality
Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.
-
Writes file to system bin folder
-