General
- Target uYtea.arm7.elf
- Size 132KB
- Sample260423-y92etahs2x
- SHA256 5ec33cc78fe1c481f0a38563ef71d215e9a7a570540aa417a8192ff65bed053a
- MD5 0ceb1f4b6815f8d2e96a34367ef63d02
- SHA1 e1ada6c23a015e7a926b06fec1a3109c2a3db1d6
- SHA512 0bd51dc05602c88af4abbf72f20cb7c8625efa088c9f93dea87954a7854afa69e7588552eec52a6ee017bd246591c02a50a59c8ae01bae07c8f4f96e16e07eb6
- SSDEEP 3072:BxioDMQI5nr5aO4nt3qZg2IWu6b4MX7LkDM/94PmPw/t93:DioDtI5rcnt3qZgPWjHX74DM/9YmPw/f
- TLSH T1A6D34C46FB418F13C0D51779B6EF42453322A795A3DB73069A285FB43F8669F0E23A06
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
uYtea.arm7.elf
Resource
debian12-armhf-20260126-en
3 signatures
150 seconds
Malware Config
Extracted
Family
-
mirai
Botnet
-
DEMONS
Targets
-
- Target uYtea.arm7.elf
- Size 132KB
- SHA256 5ec33cc78fe1c481f0a38563ef71d215e9a7a570540aa417a8192ff65bed053a
- MD5 0ceb1f4b6815f8d2e96a34367ef63d02
- SHA1 e1ada6c23a015e7a926b06fec1a3109c2a3db1d6
- SHA512 0bd51dc05602c88af4abbf72f20cb7c8625efa088c9f93dea87954a7854afa69e7588552eec52a6ee017bd246591c02a50a59c8ae01bae07c8f4f96e16e07eb6
- SSDEEP 3072:BxioDMQI5nr5aO4nt3qZg2IWu6b4MX7LkDM/94PmPw/t93:DioDtI5rcnt3qZgPWjHX74DM/9YmPw/f
- TLSH T1A6D34C46FB418F13C0D51779B6EF42453322A795A3DB73069A285FB43F8669F0E23A06
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Modifies Watchdog functionality
Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.
-
Writes file to system bin folder