General
- Target armv6l.elf
- Size 115KB
- Sample260718-cjsjbscy5l
- SHA256 ee28d48c9b22e4f02b8c61bc98af039df9cda6939b99fb71d9b0fd16e9fba14e
- MD5 e83c3615eac82b11b5e7e3ead73ca9f8
- SHA1 b07f7797e0332e402bd747d1c1391c164bc35b2a
- SHA512 94184c1e390f70239bf505eafb57dbcb123deef39a01c52ffc2d17ed50f30517bc5a03650c998c88a0d36679e5c233c212e5e41e3ff649d19318a39902497ac5
- SSDEEP 3072:0q7fc/RikR3vMA1vfEiYitDAXvmHpXOl20KvI:t4RFtvMivfEiYi4vGI2fvI
- TLSH T125B312B086254F31E120367BCCB8035AB165CFBCF17F3EE679452A75206690E8FC6698
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Behavioral task
behavioral1
Sample
armv6l.elf
Resource
debian12-armhf-20260513-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target armv6l.elf
- Size 115KB
- SHA256 ee28d48c9b22e4f02b8c61bc98af039df9cda6939b99fb71d9b0fd16e9fba14e
- MD5 e83c3615eac82b11b5e7e3ead73ca9f8
- SHA1 b07f7797e0332e402bd747d1c1391c164bc35b2a
- SHA512 94184c1e390f70239bf505eafb57dbcb123deef39a01c52ffc2d17ed50f30517bc5a03650c998c88a0d36679e5c233c212e5e41e3ff649d19318a39902497ac5
- SSDEEP 3072:0q7fc/RikR3vMA1vfEiYitDAXvmHpXOl20KvI:t4RFtvMivfEiYi4vGI2fvI
- TLSH T125B312B086254F31E120367BCCB8035AB165CFBCF17F3EE679452A75206690E8FC6698
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Creates a large amount of network flows
This may indicate a network scan to discover remotely running services.
-
Modifies Watchdog functionality
Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.