General
- Target Mddos.arm5.elf
- Size 654KB
- Sample260807-yf3e1svybv
- SHA256 4f91e8cc2d5ad77b010bc5db30e6e667e6e9c120f4d0b92ab80e5b71282b401c
- MD5 855ba6cfae0dabfc68e2c85145fc928f
- SHA1 6a63b30bd7327f42e43b00cfe9c4b4bac7f19e8d
- SHA512 ff1222032c00c4af28dc984a7f0040714820db7cd6964029aa2a93413b0b0bc22b9bc917da847b832860a9fc1129765f83484159fd3d236f9195ba2b06b3fc36
- SSDEEP 12288:Oijanr2ZYGCCa0IjQ3M86MzJnlWEmdpgRK3vFo/qZmr68N8pqP8qOt:Oik6CCAsMTMFnlWLdGw/fmr1bq
- TLSH T15FE43955F8809F61C6C529B6F65D42AC73074BB9D3EB72069A144B343BEB86B0F3A701
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
Mddos.arm5.elf
Resource
debian12-armhf-20260513-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target Mddos.arm5.elf
- Size 654KB
- SHA256 4f91e8cc2d5ad77b010bc5db30e6e667e6e9c120f4d0b92ab80e5b71282b401c
- MD5 855ba6cfae0dabfc68e2c85145fc928f
- SHA1 6a63b30bd7327f42e43b00cfe9c4b4bac7f19e8d
- SHA512 ff1222032c00c4af28dc984a7f0040714820db7cd6964029aa2a93413b0b0bc22b9bc917da847b832860a9fc1129765f83484159fd3d236f9195ba2b06b3fc36
- SSDEEP 12288:Oijanr2ZYGCCa0IjQ3M86MzJnlWEmdpgRK3vFo/qZmr68N8pqP8qOt:Oik6CCAsMTMFnlWLdGw/fmr1bq
- TLSH T15FE43955F8809F61C6C529B6F65D42AC73074BB9D3EB72069A144B343BEB86B0F3A701
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Modifies Watchdog functionality
Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.
-
Reads process memory
Read the memory of a process through the /proc virtual filesystem. This can be used to steal credentials.