General
- Target parm7.elf
- Size 98KB
- Sample260609-zyk45aas6m
- SHA256 3f2f76194be8ef9dcca6820a0ff688ea4c7995c970096cb4d5ff87cb3efa1af3
- MD5 094e73bf66e25f60cbf598a57fa45bc0
- SHA1 4f5980364e0d7a4cd7fb73ee7e4524977c56c572
- SHA512 a726004a1ad7e6d8d069b3b81d9d0d5cf731758e46425e79a84e11640bb733a42413a92620c1b83d02a8e1c3328cc4e151c5d46068de77061ffd0450aa72fed1
- SSDEEP 1536:nlEPwHV2QaZmbCekc1uVOaukaGHl25459WsYVve4FWpehbqngL/xNod/yaFhnfNJ:nlvMEpN1uVHzwXW0qngLTodHFJ6IN
- TLSH T1F2A3021916BE78B044B444F3BD740481647BAEC89EAE0C53FB251D391967B5BB7E0AC3
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
parm7.elf
Resource
debian12-armhf-20260127-en
5 signatures
150 seconds
Malware Config
Extracted
Family
-
mirai
Botnet
-
MIRAI
Targets
-
- Target parm7.elf
- Size 98KB
- SHA256 3f2f76194be8ef9dcca6820a0ff688ea4c7995c970096cb4d5ff87cb3efa1af3
- MD5 094e73bf66e25f60cbf598a57fa45bc0
- SHA1 4f5980364e0d7a4cd7fb73ee7e4524977c56c572
- SHA512 a726004a1ad7e6d8d069b3b81d9d0d5cf731758e46425e79a84e11640bb733a42413a92620c1b83d02a8e1c3328cc4e151c5d46068de77061ffd0450aa72fed1
- SSDEEP 1536:nlEPwHV2QaZmbCekc1uVOaukaGHl25459WsYVve4FWpehbqngL/xNod/yaFhnfNJ:nlvMEpN1uVHzwXW0qngLTodHFJ6IN
- TLSH T1F2A3021916BE78B044B444F3BD740481647BAEC89EAE0C53FB251D391967B5BB7E0AC3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Deletes itself
-
Modifies Watchdog functionality
Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.