General
- Target sdfjgnjsdf.arm7.elf
- Size 229KB
- Sample260808-ydvx6atdjg
- SHA256 6a79acea7924dd39dbaada36450a6cdf362335c1b4f979dab2d18ff44d47c619
- MD5 1450c1348a0316510483269328ae103a
- SHA1 a9b95f813b56dd818bfd2a4e31d05731d7f64f49
- SHA512 6a5549ad0594bf66274b75b56d0d8b59a577b85c8e07c0e7dfc393835f0f4fcae022576453832ad3e560c06127b46dd7f1c7a0773919ea729c622247c307798b
- SSDEEP 3072:3FZ4vxxGtk6BiWv53P5q3FaA0HTpcRqWHsi2uf6Q3V/GwUt:4vv6V53BaFaA0HTpcgC2uf6Q3V/GwUt
- TLSH T176343A46EB414B13C4D627B9FA9F42453333DB6493EB73069928ABB03BC775A4F62601
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
sdfjgnjsdf.arm7.elf
Resource
debian12-armhf-20260127-en
2 signatures
150 seconds
Malware Config
Extracted
Family
-
mirai
Botnet
-
LZRD
C2
-
8.8.8.8
-
94.154.43.46
Targets
-
- Target sdfjgnjsdf.arm7.elf
- Size 229KB
- SHA256 6a79acea7924dd39dbaada36450a6cdf362335c1b4f979dab2d18ff44d47c619
- MD5 1450c1348a0316510483269328ae103a
- SHA1 a9b95f813b56dd818bfd2a4e31d05731d7f64f49
- SHA512 6a5549ad0594bf66274b75b56d0d8b59a577b85c8e07c0e7dfc393835f0f4fcae022576453832ad3e560c06127b46dd7f1c7a0773919ea729c622247c307798b
- SSDEEP 3072:3FZ4vxxGtk6BiWv53P5q3FaA0HTpcRqWHsi2uf6Q3V/GwUt:4vv6V53BaFaA0HTpcgC2uf6Q3V/GwUt
- TLSH T176343A46EB414B13C4D627B9FA9F42453333DB6493EB73069928ABB03BC775A4F62601
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Modifies Watchdog functionality
Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.
-
Writes file to system bin folder