General
- Target volar.armv5l
- Size 646KB
- Sample260717-kn8ecabt8z
- SHA256 1bccd207b1d0c56f8f2de3f336efaf940e4a74f9ca410ae21020acd18bdf135d
- MD5 55a6958158b1cf561eaf06abd74e4d73
- SHA1 6b7ba7171a6572d78f9230ad5349b6fb12d6c387
- SHA512 2d2a262e40dd6a71fe97a8af419dfd8b64f38ce073737312e07149ed5ba6a9ee8c0aa11e9004eee65011d40043ced755dccd22404b772d1c873a79861e6b19f7
- SSDEEP 12288:F4KXMBCRZbMTphn++aQY+yM9wfeukMaY/5AxnZDy8p0RK5:uKXMcMb++e+ykw2eKxZD8
- TLSH T141E42855F8809F61C6D539B6F75D82A873074B79D3EB72069A244B3037EB86B0F3A601
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Behavioral task
behavioral1
Sample
volar.armv5l
Resource
debian12-armhf-20260513-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target volar.armv5l
- Size 646KB
- SHA256 1bccd207b1d0c56f8f2de3f336efaf940e4a74f9ca410ae21020acd18bdf135d
- MD5 55a6958158b1cf561eaf06abd74e4d73
- SHA1 6b7ba7171a6572d78f9230ad5349b6fb12d6c387
- SHA512 2d2a262e40dd6a71fe97a8af419dfd8b64f38ce073737312e07149ed5ba6a9ee8c0aa11e9004eee65011d40043ced755dccd22404b772d1c873a79861e6b19f7
- SSDEEP 12288:F4KXMBCRZbMTphn++aQY+yM9wfeukMaY/5AxnZDy8p0RK5:uKXMcMb++e+ykw2eKxZD8
- TLSH T141E42855F8809F61C6D539B6F75D82A873074B79D3EB72069A244B3037EB86B0F3A601
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10Modifies Watchdog functionality
Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.
Enumerates running processes
Discovers information about currently running processes on the system