General
- Target bot.arm7.elf
- Size 442KB
- Sample260827-kq38easbkc
- SHA256 a96886369a460e7fe167518836a5c59226901a469968bd320cab08788dbb6205
- MD5 4b75cb466d05917b58b051a4336d7af5
- SHA1 501e0eb487cd4f7f119bd8c7fd87acf4b8abc1de
- SHA512 1cfaf5abd46425ab68777981f15b616b9277b35db19f59d2efb640f05aa56bcda43954c850498c956420291d18d2d42a6f82c6ece457b0ac0887fd6e1e23e1b5
- SSDEEP 12288:62b39nVfSS6RyBOjdcalrL1hnkG1K0a9CrB:Zj9nVBmyNwY89
- TLSH T14EA43C48A1E1E7CAE1D4BAB5B33A784E3B630776F2E73141A119AF7323970550EF9910
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
Behavioral task
behavioral1
Sample
bot.arm7.elf
Resource
debian12-armhf-20260513-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target bot.arm7.elf
- Size 442KB
- SHA256 a96886369a460e7fe167518836a5c59226901a469968bd320cab08788dbb6205
- MD5 4b75cb466d05917b58b051a4336d7af5
- SHA1 501e0eb487cd4f7f119bd8c7fd87acf4b8abc1de
- SHA512 1cfaf5abd46425ab68777981f15b616b9277b35db19f59d2efb640f05aa56bcda43954c850498c956420291d18d2d42a6f82c6ece457b0ac0887fd6e1e23e1b5
- SSDEEP 12288:62b39nVfSS6RyBOjdcalrL1hnkG1K0a9CrB:Zj9nVBmyNwY89
- TLSH T14EA43C48A1E1E7CAE1D4BAB5B33A784E3B630776F2E73141A119AF7323970550EF9910
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Modifies Watchdog functionality
Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.
-
Traces itself
Traces itself to prevent debugging attempts