General
- Target kkk.arm7
- Size 147KB
- Sample260702-g4v76scy2v
- SHA256 2966cd4dc225c9a908804f3a110ac94b40500220cba6e8ec2cfda626adee9887
- MD5 70e1ac07d4eb4a4368fbfb80b340d747
- SHA1 51d4ef86d17809ca021894a400cec43fad242e42
- SHA512 641267a8455aac554c33f46e24ee4e63119ea4bc0bded1189be4a2e5ffc7de18a05eebf093d141a056b77fa1d647b97d89634a2fdd8f111d52a67a8eaf0a484f
- SSDEEP 3072:yIUHDiOdUD3CSaOMXQfAmW54mZa5Tl5qibxtM/9mtczTnCy:yIUH2OdU+SaOMXQfAm247Dqib3M/9LPl
- TLSH T17DE34C56E6418B13C0D62779BADF42453323AB6493EB33069928BFF43F8679E0E63505
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
kkk.arm7
Resource
debian12-armhf-20260513-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target kkk.arm7
- Size 147KB
- SHA256 2966cd4dc225c9a908804f3a110ac94b40500220cba6e8ec2cfda626adee9887
- MD5 70e1ac07d4eb4a4368fbfb80b340d747
- SHA1 51d4ef86d17809ca021894a400cec43fad242e42
- SHA512 641267a8455aac554c33f46e24ee4e63119ea4bc0bded1189be4a2e5ffc7de18a05eebf093d141a056b77fa1d647b97d89634a2fdd8f111d52a67a8eaf0a484f
- SSDEEP 3072:yIUHDiOdUD3CSaOMXQfAmW54mZa5Tl5qibxtM/9mtczTnCy:yIUH2OdU+SaOMXQfAm247Dqib3M/9LPl
- TLSH T17DE34C56E6418B13C0D62779BADF42453323AB6493EB33069928BFF43F8679E0E63505
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Modifies Watchdog functionality
Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.
-
Traces itself
Traces itself to prevent debugging attempts
-
Enumerates running processes
Discovers information about currently running processes on the system