General
- Target morte.arm7.elf
- Size 185KB
- Sample260725-schcsazhlc
- SHA256 e8651e6239cb035facb2e7ed72a447aea560edcfd08ace5f29e8b4ca97ee1f36
- MD5 e090a0bd5d944d0a14f618e23a5dd7cb
- SHA1 3f9a51cefb47e946eddbd2cc8072af8d3db662e4
- SHA512 c6034b075309f5f7f4863ad6557a56b0664f9ce0650c153247a181f4ff165750b9744211e311d6a5f3cfe616bd4eb82889cb29d365c7322bfcf147df875ea65b
- SSDEEP 3072:+TSg8BH1yu0AMU89aYLxE/z81/Ue02FRHoAM/ROs2s64y:ng8B4u0J79aYLxEL7e02rIAM/REs64y
- TLSH T112043A46E6408B13C0D72BBAFBDB42463333A75493E773059928AFB43F867A94F26505
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
morte.arm7.elf
Resource
debian12-armhf-20260513-en
2 signatures
150 seconds
Malware Config
Extracted
Family
-
mirai
Botnet
-
LZRD
C2
-
185.228.82.213
Targets
-
- Target morte.arm7.elf
- Size 185KB
- SHA256 e8651e6239cb035facb2e7ed72a447aea560edcfd08ace5f29e8b4ca97ee1f36
- MD5 e090a0bd5d944d0a14f618e23a5dd7cb
- SHA1 3f9a51cefb47e946eddbd2cc8072af8d3db662e4
- SHA512 c6034b075309f5f7f4863ad6557a56b0664f9ce0650c153247a181f4ff165750b9744211e311d6a5f3cfe616bd4eb82889cb29d365c7322bfcf147df875ea65b
- SSDEEP 3072:+TSg8BH1yu0AMU89aYLxE/z81/Ue02FRHoAM/ROs2s64y:ng8B4u0J79aYLxEL7e02rIAM/REs64y
- TLSH T112043A46E6408B13C0D72BBAFBDB42463333A75493E773059928AFB43F867A94F26505
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Modifies Watchdog functionality
Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.