General
- Target armv6l
- Size 123KB
- Sample260808-pncd5axajg
- SHA256 61dd9a16126a0e5714373324558cea6dfc0993e8db1e32bf7d32c919b9b0dde1
- MD5 168e332115a261af441b9224ffffde9e
- SHA1 8ad1d10ffe3b774b8b11b3dacb0fbb4c43b07294
- SHA512 b1e356e4098c8f33b8200fa2b4fe971823149f1c2eab4e5cadbe892a55bb98c3354009ebfe1b83f95de3ffd37298df87c9de197c8db6731a4be9bc54d4d465eb
- SSDEEP 3072:AbP2yexPGDr9TbP3v8lW0754C9MIUasD/RwekK4WtpSl5BsA:S2yex+DrBP36Wwv9dUaU/RwpKlt47BT
- TLSH T1C1C3129B4495AF78C0F50C3C8AFD9C8775A0A717F0F530D399241365A96220A8BEDDEA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Behavioral task
behavioral1
Sample
armv6l
Resource
debian12-armhf-20260513-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target armv6l
- Size 123KB
- SHA256 61dd9a16126a0e5714373324558cea6dfc0993e8db1e32bf7d32c919b9b0dde1
- MD5 168e332115a261af441b9224ffffde9e
- SHA1 8ad1d10ffe3b774b8b11b3dacb0fbb4c43b07294
- SHA512 b1e356e4098c8f33b8200fa2b4fe971823149f1c2eab4e5cadbe892a55bb98c3354009ebfe1b83f95de3ffd37298df87c9de197c8db6731a4be9bc54d4d465eb
- SSDEEP 3072:AbP2yexPGDr9TbP3v8lW0754C9MIUasD/RwekK4WtpSl5BsA:S2yex+DrBP36Wwv9dUaU/RwpKlt47BT
- TLSH T1C1C3129B4495AF78C0F50C3C8AFD9C8775A0A717F0F530D399241365A96220A8BEDDEA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Creates a large amount of network flows
This may indicate a network scan to discover remotely running services.
-
Modifies Watchdog functionality
Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.