General
- Target parm7
- Size 252KB
- Sample260818-alnxtas1fx
- SHA256 b148bc4a8632dc4215840454494bbe682de899c6b28515f7e6b57a3cb0a4ac06
- MD5 9ebbb5a4b3f775935828b96ca4a9e37b
- SHA1 c16259a1a4638633eec29c0010170bf41bf9380b
- SHA512 f6a28c52123adb690a8655f99b480c3d7d6f1fe4f2871b40f2ecba7cc54f74d304ea655abbb70859ea8ef83e2c44c926b86db8629c40b30b997e5862f10b8727
- SSDEEP 6144:fXLSdtiFhydgCZILaV8guAUc6Xfdk9vl8HxH6sV/GfQmx2cLis:fXLSdtKh1CZILaV8guAUc6vdadA/AQmX
- TLSH T180443946FA404A13C4D6177AFA9F42453333E768D3EB73069928AFB43BC775A4E62601
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
Behavioral task
behavioral1
Sample
parm7
Resource
debian12-armhf-20260513-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target parm7
- Size 252KB
- SHA256 b148bc4a8632dc4215840454494bbe682de899c6b28515f7e6b57a3cb0a4ac06
- MD5 9ebbb5a4b3f775935828b96ca4a9e37b
- SHA1 c16259a1a4638633eec29c0010170bf41bf9380b
- SHA512 f6a28c52123adb690a8655f99b480c3d7d6f1fe4f2871b40f2ecba7cc54f74d304ea655abbb70859ea8ef83e2c44c926b86db8629c40b30b997e5862f10b8727
- SSDEEP 6144:fXLSdtiFhydgCZILaV8guAUc6Xfdk9vl8HxH6sV/GfQmx2cLis:fXLSdtKh1CZILaV8guAUc6vdadA/AQmX
- TLSH T180443946FA404A13C4D6177AFA9F42453333E768D3EB73069928AFB43BC775A4E62601
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Deletes itself
-
Modifies Watchdog functionality
Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.
-
Reads process memory
Read the memory of a process through the /proc virtual filesystem. This can be used to steal credentials.