General
- Target arm7.elf
- Size 140KB
- Sample261020-se6s6asw2r
- SHA256 42b16f19cfc9f64c7b0ac61f642f3929940d9feda7012419dccf18c988de7e3c
- MD5 b21718dd36acf0b4e3111332497ebe62
- SHA1 75a092ec6d118029801c048083fa2a39446ba668
- SHA512 3cd76741bdc148960d55dec7a807fc14a237c3fdfb40c67d6c11297fcc85e069b515d6fae14d275de751b4f2d3f7fefbf50d8793a941fa3ccd53a3b3c5852bcb
- SSDEEP 3072:fpMilILKakwy0iCatXVDruuOT/QivP5MM/99O:hMilAKakwy0iCatlDYTQivPKM/99O
- TLSH T11AE32A46EA418B13C0D61775B6EF42453323AB6497EB73069928BFF43F8279E0E63605
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
arm7.elf
Resource
debian12-armhf-20260513-en
3 signatures
150 seconds
Malware Config
Extracted
Family
-
mirai
Botnet
-
BOTNET
C2
-
scan.yerco.xyz
Targets
-
- Target arm7.elf
- Size 140KB
- SHA256 42b16f19cfc9f64c7b0ac61f642f3929940d9feda7012419dccf18c988de7e3c
- MD5 b21718dd36acf0b4e3111332497ebe62
- SHA1 75a092ec6d118029801c048083fa2a39446ba668
- SHA512 3cd76741bdc148960d55dec7a807fc14a237c3fdfb40c67d6c11297fcc85e069b515d6fae14d275de751b4f2d3f7fefbf50d8793a941fa3ccd53a3b3c5852bcb
- SSDEEP 3072:fpMilILKakwy0iCatXVDruuOT/QivP5MM/99O:hMilAKakwy0iCatlDYTQivPKM/99O
- TLSH T11AE32A46EA418B13C0D61775B6EF42453323AB6497EB73069928BFF43F8279E0E63605
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Modifies Watchdog functionality
Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.
-
Enumerates running processes
Discovers information about currently running processes on the system