General
- Target navo.arm7.elf
- Size 183KB
- Sample250511-xtvrnaswbs
- SHA256 d338e32bb255f02484b9a24117a0cc0fbc151eed3bb690a83b14f015dd757811
- MD5 298478716870c0f7a7dfb74f25bc4557
- SHA1 ceaf4595be41a397e55b63453c9314119dfb0e19
- SHA512 a8f44f46db0b859262ff01ee6fdce079fddf8189ae2cd4f3be0ce314cbf0d587c6ed2b613e17e59f82933721d4817102309c2c618b66cc20f25a75d7e5d8bedf
- SSDEEP 3072:ssN5AVERVOZzgleIa81auwRx6+IVVL0A3mhDgoDYM/RQcsL//:R5DOZ0oIa81auwRINL0A3MhDYM/RnA//
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Behavioral task
behavioral1
Sample
navo.arm7.elf
Resource
debian12-armhf-20240729-en
4 signatures
150 seconds
Malware Config
Extracted
Family
-
mirai
C2
-
mywebh.kro.kr
Targets
-
- Target navo.arm7.elf
- Size 183KB
- SHA256 d338e32bb255f02484b9a24117a0cc0fbc151eed3bb690a83b14f015dd757811
- MD5 298478716870c0f7a7dfb74f25bc4557
- SHA1 ceaf4595be41a397e55b63453c9314119dfb0e19
- SHA512 a8f44f46db0b859262ff01ee6fdce079fddf8189ae2cd4f3be0ce314cbf0d587c6ed2b613e17e59f82933721d4817102309c2c618b66cc20f25a75d7e5d8bedf
- SSDEEP 3072:ssN5AVERVOZzgleIa81auwRx6+IVVL0A3mhDgoDYM/RQcsL//:R5DOZ0oIa81auwRINL0A3MhDYM/RnA//
- MD5 SHA1 SHA512 SSDEEP
Score7/10Deletes itself
Traces itself
Traces itself to prevent debugging attempts