General
- Target 0af527d9d042f22d5efbfe06373f78a868bff3a12edd3a1783558ebc1836a194
- Size 65KB
- Sample260706-ckfadshs41
- SHA256 0af527d9d042f22d5efbfe06373f78a868bff3a12edd3a1783558ebc1836a194
- MD5 3c81b00549ceca1837896a5b1474fe61
- SHA1 28a1abfd350be268a7a63c45f3d0fc729afe3791
- SHA512 7cf8f295ef348f5e74c3486e99e9a959ce95e3368fa35e6d81bb032e707557d5739ba051b45fe0ae5636ca00cfd9868efd6b88675e4a1817271f653065eb52d9
- SSDEEP 1536:RlsLfJ8IB6oG0rzf8AxpTQE8LgNG1Ys+m0c:RlCx8G6oG0rzTWLgE1YG0c
- TLSH T1B0630288967AA827C1E40533C5BD97443A4122FC71CDBD384D1622ECEB818A7ABF9137
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
0af527d9d042f22d5efbfe06373f78a868bff3a12edd3a1783558ebc1836a194
Resource
debian12-armhf-20260513-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 0af527d9d042f22d5efbfe06373f78a868bff3a12edd3a1783558ebc1836a194
- Size 65KB
- SHA256 0af527d9d042f22d5efbfe06373f78a868bff3a12edd3a1783558ebc1836a194
- MD5 3c81b00549ceca1837896a5b1474fe61
- SHA1 28a1abfd350be268a7a63c45f3d0fc729afe3791
- SHA512 7cf8f295ef348f5e74c3486e99e9a959ce95e3368fa35e6d81bb032e707557d5739ba051b45fe0ae5636ca00cfd9868efd6b88675e4a1817271f653065eb52d9
- SSDEEP 1536:RlsLfJ8IB6oG0rzf8AxpTQE8LgNG1Ys+m0c:RlCx8G6oG0rzTWLgE1YG0c
- TLSH T1B0630288967AA827C1E40533C5BD97443A4122FC71CDBD384D1622ECEB818A7ABF9137
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects suspicious XORed keyword - Mozilla/5.0
-
Modifies Watchdog functionality
Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.
-
Enumerates running processes
Discovers information about currently running processes on the system
-
Writes file to system bin folder