Resubmissions

20/07/2026, 12:11

260720-pcvfkahv6k10

09/07/2026, 12:18

260709-pgnhtabs6t10

General

  • Target
    arm7
  • Size 165KB
  • Sample260709-pgnhtabs6t
  • SHA256 494817e36263d76dcf9fb867fcb92f1c9584fce1b182d83ee6b9a14f002be888
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      arm7
    • Size 165KB
    • SHA256 494817e36263d76dcf9fb867fcb92f1c9584fce1b182d83ee6b9a14f002be888
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    • Renames itself

    • Enumerates active TCP sockets

      Gets active TCP sockets from /proc virtual filesystem.

    • Writes file to system bin folder

MITRE ATT&CK Enterprise v16

Tasks