General
- Target zero.armv7l.elf
- Size 51KB
- Sample260717-wnjxjac191
- SHA256 2dfbdf7b8575da1f4b164c1552c0bfa8dac7730aa306fc4a96d452cd2ff182a5
- MD5 b0d855396197834fc47b34e8f9b65ca8
- SHA1 9ded3914b5fad27edaa7cf71f3000e52b054379c
- SHA512 ecb6d1d129d3b9ae4519bc6429c8f279521e1cda45b28554b9b60a3d8b6d3c82931b4c1fbff08f180d6a0b1c03cff4830fc92f2aabd1090751897dc7b4492aa5
- SSDEEP 768:3gVnFK6OkmxlBJNvlwl5N4YjveeOmWqsYOeKxLp8/aW5Yd5Wm9q3UEL/:3g1dLmlBJ4rtL7BKxLG+uL/
- TLSH T1B333F13230B22591CCE14ABAFE514F99CAC10BB9D1D67D72295048EC7BBC29957BA403
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
zero.armv7l.elf
Resource
debian12-armhf-20260513-en
3 signatures
150 seconds
Malware Config
Extracted
Family
-
mirai
C2
-
91.92.40.15
Targets
-
- Target zero.armv7l.elf
- Size 51KB
- SHA256 2dfbdf7b8575da1f4b164c1552c0bfa8dac7730aa306fc4a96d452cd2ff182a5
- MD5 b0d855396197834fc47b34e8f9b65ca8
- SHA1 9ded3914b5fad27edaa7cf71f3000e52b054379c
- SHA512 ecb6d1d129d3b9ae4519bc6429c8f279521e1cda45b28554b9b60a3d8b6d3c82931b4c1fbff08f180d6a0b1c03cff4830fc92f2aabd1090751897dc7b4492aa5
- SSDEEP 768:3gVnFK6OkmxlBJNvlwl5N4YjveeOmWqsYOeKxLp8/aW5Yd5Wm9q3UEL/:3g1dLmlBJ4rtL7BKxLG+uL/
- TLSH T1B333F13230B22591CCE14ABAFE514F99CAC10BB9D1D67D72295048EC7BBC29957BA403
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies Watchdog functionality
Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.