General
- Target XDarm7.elf
- Size 156KB
- Sample260712-amfmtsbv9j
- SHA256 5eb20bf4b6ff91ac45d4f7632661ff2166c7cf1270022a201a2dab8e600a1817
- MD5 61cff27d1865e1cfcdcedccc68fba15c
- SHA1 19a26d0a2a00618d7f711ca99746f38f9e600db2
- SHA512 8d6d5ea1bf8cba2551995c19d84d5a024be88cf15a931a70405297b6796069998545950106b066bcd3f7ad492f355ac48f6ee6fddc1b07dfb250cbbf606aa140
- SSDEEP 3072:8hG77R4X2HaUJbXUc1df4RVaEFkINdLfhLNM/9tMiOZH7v5w2F:8hGvKGHaUJbXUcrf4aEqIzLfhZM/9Wnv
- TLSH T13BF33C46E6414A13C0D6177ABBEF42453323AB6493DB73069928BFF43F8679E0E63605
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
XDarm7.elf
Resource
debian12-armhf-20260513-en
5 signatures
150 seconds
Malware Config
Extracted
Family
-
mirai
Botnet
-
MIRAI
Targets
-
- Target XDarm7.elf
- Size 156KB
- SHA256 5eb20bf4b6ff91ac45d4f7632661ff2166c7cf1270022a201a2dab8e600a1817
- MD5 61cff27d1865e1cfcdcedccc68fba15c
- SHA1 19a26d0a2a00618d7f711ca99746f38f9e600db2
- SHA512 8d6d5ea1bf8cba2551995c19d84d5a024be88cf15a931a70405297b6796069998545950106b066bcd3f7ad492f355ac48f6ee6fddc1b07dfb250cbbf606aa140
- SSDEEP 3072:8hG77R4X2HaUJbXUc1df4RVaEFkINdLfhLNM/9tMiOZH7v5w2F:8hGvKGHaUJbXUcrf4aEqIzLfhZM/9Wnv
- TLSH T13BF33C46E6414A13C0D6177ABBEF42453323AB6493DB73069928BFF43F8679E0E63605
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Deletes itself
-
Modifies Watchdog functionality
Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.