General
- Target parm7.elf
- Size 150KB
- Sample260417-csv1tadx5k
- SHA256 3ffa61bb30699516e9aee0b1dc7052005441f4b9027adc5168e8dc7c42208614
- MD5 63bc73c0adb3acf412c44169a4e91972
- SHA1 1f95424e172635254a325362dabcbb701465b932
- SHA512 27403b997c1ebe3a25156e7033877594dae4f4b8b918018256f249b57910581254fcb43b04c373e46a4af4b26a3f48decbfa25e8c953366e659b0aa371964134
- SSDEEP 3072:X5uRoJ48aV7/HBcP0x57mW7gz4habLNJmM/9wGS:X5uF8aV7/HBcPs5V7A4QbLNMM/9vS
- TLSH T154E32A46E7408A13C4D6177ABAAF42453323AB64D3DB73059928BFB43F8279E0E67605
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
parm7.elf
Resource
debian12-armhf-20260127-en
4 signatures
150 seconds
Malware Config
Extracted
Family
-
mirai
Botnet
-
MIRAI
Targets
-
- Target parm7.elf
- Size 150KB
- SHA256 3ffa61bb30699516e9aee0b1dc7052005441f4b9027adc5168e8dc7c42208614
- MD5 63bc73c0adb3acf412c44169a4e91972
- SHA1 1f95424e172635254a325362dabcbb701465b932
- SHA512 27403b997c1ebe3a25156e7033877594dae4f4b8b918018256f249b57910581254fcb43b04c373e46a4af4b26a3f48decbfa25e8c953366e659b0aa371964134
- SSDEEP 3072:X5uRoJ48aV7/HBcP0x57mW7gz4habLNJmM/9wGS:X5uF8aV7/HBcPs5V7A4QbLNMM/9vS
- TLSH T154E32A46E7408A13C4D6177ABAAF42453323AB64D3DB73059928BFB43F8279E0E67605
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Deletes itself
-
Modifies Watchdog functionality
Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.