General
- Target zero.armv7l.elf
- Size 30KB
- Sample260605-ya8d3sc191
- SHA256 0ca55b1d6fba8c84f2678cb7793613a228e479fc58d6c6fda157d4972b8ec10f
- MD5 fced04c160abb7c757077d38bea214c2
- SHA1 229ce06b49c2988ba2e713a6ceb5573ec1756403
- SHA512 ee50dc52c671af846615b924ab1ccbc946259f40610e2729188d37f5cb308a28c950be2611ea65b549aba3148a881d1c1736786271ad60027dc23e44d8806b8b
- SSDEEP 768:HDxG2Id87hUL5BySL5kkS/0LRSFS9bcL9q3UELr:HDxHQ8NUVBbNf0AbcqLr
- TLSH T1CCE2E106CA12E859E9203ABBE969C64537CE7CBD54AC323B3637051C37C661653BE4C7
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
zero.armv7l.elf
Resource
debian12-armhf-20260513-en
3 signatures
150 seconds
Malware Config
Extracted
Family
-
mirai
Botnet
-
LZRD
Targets
-
- Target zero.armv7l.elf
- Size 30KB
- SHA256 0ca55b1d6fba8c84f2678cb7793613a228e479fc58d6c6fda157d4972b8ec10f
- MD5 fced04c160abb7c757077d38bea214c2
- SHA1 229ce06b49c2988ba2e713a6ceb5573ec1756403
- SHA512 ee50dc52c671af846615b924ab1ccbc946259f40610e2729188d37f5cb308a28c950be2611ea65b549aba3148a881d1c1736786271ad60027dc23e44d8806b8b
- SSDEEP 768:HDxG2Id87hUL5BySL5kkS/0LRSFS9bcL9q3UELr:HDxHQ8NUVBbNf0AbcqLr
- TLSH T1CCE2E106CA12E859E9203ABBE969C64537CE7CBD54AC323B3637051C37C661653BE4C7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies Watchdog functionality
Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.