General
- Target arm7.elf
- Size 46KB
- Sample260707-qa82lsfv4r
- SHA256 b17df2de8a96e0d24b48dfb1ceb05bddd0e28e8fb5dbf94df3813599077df514
- MD5 cd6c28df0bcd8260c4f7bb0c32d5ace5
- SHA1 938b838f808feba2666e9fe578265713529e456e
- SHA512 04dad89ae11704912116a0bb5ab494cf9ff118ea62a9798860292f3d7e314d5b973d7234df859149abb665684d61f53a0b8cda4b1f87d14eeff6f9135d9e4eba
- SSDEEP 768:C4Zkw0HMAL5y/XvbpI8XMMsByDZUHvSwZz9q3UELA7++cCmkymOqDo+ryGHnVeRC:C4ZT8DV4f2wscDZwvS7LI+mmkaqDPrHh
- TLSH T1E623F1A08755CED6CAF09136BEBD8AC143FCE7B4C46D3C67620AE05C9E1851907B1B4B
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
arm7.elf
Resource
debian12-armhf-20260127-en
4 signatures
150 seconds
Malware Config
Extracted
Family
-
mirai
Botnet
-
LZRD
Targets
-
- Target arm7.elf
- Size 46KB
- SHA256 b17df2de8a96e0d24b48dfb1ceb05bddd0e28e8fb5dbf94df3813599077df514
- MD5 cd6c28df0bcd8260c4f7bb0c32d5ace5
- SHA1 938b838f808feba2666e9fe578265713529e456e
- SHA512 04dad89ae11704912116a0bb5ab494cf9ff118ea62a9798860292f3d7e314d5b973d7234df859149abb665684d61f53a0b8cda4b1f87d14eeff6f9135d9e4eba
- SSDEEP 768:C4Zkw0HMAL5y/XvbpI8XMMsByDZUHvSwZz9q3UELA7++cCmkymOqDo+ryGHnVeRC:C4ZT8DV4f2wscDZwvS7LI+mmkaqDPrHh
- TLSH T1E623F1A08755CED6CAF09136BEBD8AC143FCE7B4C46D3C67620AE05C9E1851907B1B4B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies Watchdog functionality
Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.
-
Writes file to system bin folder