General
- Target sdfjgnjsdf.arm7.elf
- Size 234KB
- Sample260811-m24dnaea54
- SHA256 da2703074fd842e72224f1adb25f610dfb9175d794b7246a8cc4cccc814e873f
- MD5 453ef23fc063f842f6f1506ee0d7ce43
- SHA1 7f145bbd509c23a6bb50da34e6cc4ce8490566dd
- SHA512 a13424b7f4f9cd757d9293aacb244bc3c351024ef3103be7ad814a39a215e814275a49a109b252e4944ce7702aedbdd6566dee800cd3dea855c04677433e7b94
- SSDEEP 3072:M5Ga7ClxrqiKr5NjJGDVR0GHyiaNaP1E6YMFUiR+erlSbijV/GBB:Mw7qcR0QyvNaP1E6YMeqrlSbijV/GBB
- TLSH T16C344B46EB414B13C4D627BAFA9F42453333D72897E773069928ABB03BC779A4F22505
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
sdfjgnjsdf.arm7.elf
Resource
debian12-armhf-20260513-en
2 signatures
150 seconds
Malware Config
Extracted
Family
-
mirai
Botnet
-
LZRD
C2
-
8.8.8.8
-
176.65.139.236
Targets
-
- Target sdfjgnjsdf.arm7.elf
- Size 234KB
- SHA256 da2703074fd842e72224f1adb25f610dfb9175d794b7246a8cc4cccc814e873f
- MD5 453ef23fc063f842f6f1506ee0d7ce43
- SHA1 7f145bbd509c23a6bb50da34e6cc4ce8490566dd
- SHA512 a13424b7f4f9cd757d9293aacb244bc3c351024ef3103be7ad814a39a215e814275a49a109b252e4944ce7702aedbdd6566dee800cd3dea855c04677433e7b94
- SSDEEP 3072:M5Ga7ClxrqiKr5NjJGDVR0GHyiaNaP1E6YMFUiR+erlSbijV/GBB:Mw7qcR0QyvNaP1E6YMeqrlSbijV/GBB
- TLSH T16C344B46EB414B13C4D627BAFA9F42453333D72897E773069928ABB03BC779A4F22505
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Modifies Watchdog functionality
Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.
-
Writes file to system bin folder