General
- Target parm7
- Size 252KB
- Sample260805-pgkf6a1yd1
- SHA256 dbf46eac8bebada17c1fc112d3da97cb322752bf7999f735d9ed2a2677be24a5
- MD5 ea16734ef3b7aed9f15e84b4628cb072
- SHA1 5e1b63a86a5c9cd68e4ff441514a5a5f232fd88f
- SHA512 2f99106eac99aba9c87a7e03f2b81e96ed3e4d479a6a50120c4743ccf8a9c0517e0bcc8fa93a30cf5c8079b165f42e750ddb6f5df6967f68f16eb36a09dcd386
- SSDEEP 6144:+XLSdtiFh6dkCZILaR8guAUc6YfdkxvJAHFH6sV/GTMmx2cLis:+XLSdtKhpCZILaR8guAUc6kdmho/MMmX
- TLSH T13C443946FA404A13C4D6177AFA9F42453333E768D3EB73069928AFB43BC775A4E62601
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
Behavioral task
behavioral1
Sample
parm7
Resource
debian12-armhf-20260513-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target parm7
- Size 252KB
- SHA256 dbf46eac8bebada17c1fc112d3da97cb322752bf7999f735d9ed2a2677be24a5
- MD5 ea16734ef3b7aed9f15e84b4628cb072
- SHA1 5e1b63a86a5c9cd68e4ff441514a5a5f232fd88f
- SHA512 2f99106eac99aba9c87a7e03f2b81e96ed3e4d479a6a50120c4743ccf8a9c0517e0bcc8fa93a30cf5c8079b165f42e750ddb6f5df6967f68f16eb36a09dcd386
- SSDEEP 6144:+XLSdtiFh6dkCZILaR8guAUc6YfdkxvJAHFH6sV/GTMmx2cLis:+XLSdtKhpCZILaR8guAUc6kdmho/MMmX
- TLSH T13C443946FA404A13C4D6177AFA9F42453333E768D3EB73069928AFB43BC775A4E62601
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Deletes itself
-
Modifies Watchdog functionality
Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.
-
Reads process memory
Read the memory of a process through the /proc virtual filesystem. This can be used to steal credentials.