General
- Target zero.armv7l.elf
- Size 129KB
- Sample260717-wp954sds9x
- SHA256 097f737a37c946fa82bc6959671cab02af4e5dd69f47face5e7e9f1293b2c95c
- MD5 0f102079db6991f38e64bd3f081a555b
- SHA1 3ac7de4f888fc8bc604a32d6ccbf0a1a505f3636
- SHA512 31e520336d3b6935b9fe5586070913f58dac90868f8b0aa3b80566ccb48c56a340364ba22a6b007cf1ddd7d899c404b7dab2ee84b3eae1db9c3a6b3ee60ca835
- SSDEEP 3072:EQyby2oLmpMguHcUmVUHalw7WXuH00sfC7FeBI3RA8nAEBYaEOW7PY5IsaYeFlQ8:7y3oLmpMguHcUmVUHalw7WXuH00sfCAf
- TLSH T1E1D30745EC819B11D4DA22BEFA5E028D335357BCE3EAB102AE145B2533CAA1F0F77552
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
zero.armv7l.elf
Resource
debian12-armhf-20260513-en
2 signatures
150 seconds
Malware Config
Extracted
Family
-
mirai
C2
-
91.92.40.15
Targets
-
- Target zero.armv7l.elf
- Size 129KB
- SHA256 097f737a37c946fa82bc6959671cab02af4e5dd69f47face5e7e9f1293b2c95c
- MD5 0f102079db6991f38e64bd3f081a555b
- SHA1 3ac7de4f888fc8bc604a32d6ccbf0a1a505f3636
- SHA512 31e520336d3b6935b9fe5586070913f58dac90868f8b0aa3b80566ccb48c56a340364ba22a6b007cf1ddd7d899c404b7dab2ee84b3eae1db9c3a6b3ee60ca835
- SSDEEP 3072:EQyby2oLmpMguHcUmVUHalw7WXuH00sfC7FeBI3RA8nAEBYaEOW7PY5IsaYeFlQ8:7y3oLmpMguHcUmVUHalw7WXuH00sfCAf
- TLSH T1E1D30745EC819B11D4DA22BEFA5E028D335357BCE3EAB102AE145B2533CAA1F0F77552
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Modifies Watchdog functionality
Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.