General
- Target arm6.elf
- Size 365KB
- Sample261026-pgpqwady2x
- SHA256 f3c5fa3fb2a25c719d71eee6f7af40e41478d9a31686c439b5535bdf4addb80f
- MD5 3b0568ba5cd89af8c5881df5c7e1bf94
- SHA1 494f14fc3260a59d120fadc51ee90108e77b522e
- SHA512 9992212b2ca40dbe75dceed1b9e0d7adab96e01eb33fa980ba40b18beb8255f8228e77aecfa156f75c478aa1424d03b08a44cc5571b93d8af68119296e130794
- SSDEEP 6144:bi2aQmkCgc0JITPLPbAgiC6SHOwlZk2tYntHa9ur:2ZkfJITP/lz5kkYta9ur
- TLSH T1CD84E988E1F1EBDAD1D4EA75B319780D3A230736B1D73146A51DFE3223EB1490ABD921
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
Behavioral task
behavioral1
Sample
arm6.elf
Resource
debian12-armhf-20260127-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target arm6.elf
- Size 365KB
- SHA256 f3c5fa3fb2a25c719d71eee6f7af40e41478d9a31686c439b5535bdf4addb80f
- MD5 3b0568ba5cd89af8c5881df5c7e1bf94
- SHA1 494f14fc3260a59d120fadc51ee90108e77b522e
- SHA512 9992212b2ca40dbe75dceed1b9e0d7adab96e01eb33fa980ba40b18beb8255f8228e77aecfa156f75c478aa1424d03b08a44cc5571b93d8af68119296e130794
- SSDEEP 6144:bi2aQmkCgc0JITPLPbAgiC6SHOwlZk2tYntHa9ur:2ZkfJITP/lz5kkYta9ur
- TLSH T1CD84E988E1F1EBDAD1D4EA75B319780D3A230736B1D73146A51DFE3223EB1490ABD921
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Modifies Watchdog functionality
Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.
-
Traces itself
Traces itself to prevent debugging attempts
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.