General
- Target Mddos.arm5.elf
- Size 654KB
- Sample260807-cbvzgsde52
- SHA256 996cab13bc21cff4f38ba7cbbcadd4cd31b6fe8b1fb45251d3923ca3498b3df7
- MD5 dca56af4e9d5780b89bbc8fa2c06f7e0
- SHA1 2d935c39061ddb2efbf106517e8447516303f93a
- SHA512 af5d5bac380e793b26d9cd5dfd63d5f20a5bdd30fc087f9d312b7625aba1346a701a34eda7fb084998bf19277dead2afc03103830ab07693eb71ef38d435a4b7
- SSDEEP 12288:6kWAxr4qaC5aKIjQIH86MzJyRWEmdkaRK3vFD9qC6rd8S8pqP8qbt:6k/EC5SDHTMFyRWLd/w/l6rbbx
- TLSH T1D4E42955F8809F61C6C529B6F65D42AC73074BB9D3EB72069A144B343BEB86B0F3A701
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
Mddos.arm5.elf
Resource
debian12-armhf-20260513-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target Mddos.arm5.elf
- Size 654KB
- SHA256 996cab13bc21cff4f38ba7cbbcadd4cd31b6fe8b1fb45251d3923ca3498b3df7
- MD5 dca56af4e9d5780b89bbc8fa2c06f7e0
- SHA1 2d935c39061ddb2efbf106517e8447516303f93a
- SHA512 af5d5bac380e793b26d9cd5dfd63d5f20a5bdd30fc087f9d312b7625aba1346a701a34eda7fb084998bf19277dead2afc03103830ab07693eb71ef38d435a4b7
- SSDEEP 12288:6kWAxr4qaC5aKIjQIH86MzJyRWEmdkaRK3vFD9qC6rd8S8pqP8qbt:6k/EC5SDHTMFyRWLd/w/l6rbbx
- TLSH T1D4E42955F8809F61C6C529B6F65D42AC73074BB9D3EB72069A144B343BEB86B0F3A701
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Modifies Watchdog functionality
Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.
-
Reads process memory
Read the memory of a process through the /proc virtual filesystem. This can be used to steal credentials.