Extracted

• • Target
    zero.armv7l.elf
  • Size 141KB
  • SHA256 c89341ffa77579edea71e6902494c09a569cc4f6356d616933f273e8ea38bf89
  • MD5 a526e2a763a69ba1dda69e7b58c4d6ac
  • SHA1 08ab6f65d703b819c02677749380b0dea3f6fe48
  • SHA512 52d7680fc318c43ab3e1e7af24aa6d5cde9b09a412f8b7b5b058cd78a2c418e0fa8300b4bb0917ea6a6799672855164d67db81f18fde2e2fda40e6bb7fb5e0bf
  • SSDEEP 3072:/XVCt2PZvjYxbuvlvbIjmB16aDGb3d7slx5iBEHh:/F6gbIqv6aDGb3dYkBEHh
  • TLSH
    T121E30789BC814B00D5D636F6FA1E124933534BBCE3F9B1039E145B2E278AD6B0B37A55
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  7^/10

  defense_evasiondiscovery

  • Modifies Watchdog functionality

    Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    defense_evasion

  • Traces itself

    Traces itself to prevent debugging attempts

  behavioral1