General
- Target arm6.elf
- Size 365KB
- Sample261027-gr7ens1zbx
- SHA256 16844ad274f6e2feeb212ab9fe5f27e22f77d4d7f402f036fb1b20c3a9175d77
- MD5 eb9583c6cb1c9eaa53bdea4b7acc67fb
- SHA1 a7da0abdbe9ee623e94de064a965f255b9861547
- SHA512 9907a9fe3cd4be6bf96f3f1f18ce450d3748ac591385070b671f216273ee710f160c1d77c921ebb8f372e837a4dec3513f129f3c75f207b1ab1af3df9088980b
- SSDEEP 6144:LOrFR5bbGOWY/nXSi8bPMe3YHHbU3wdPGotzzma9uP:yZzb5/nXSIecvGiOa9uP
- TLSH T1B084E888E1F1EBDAD1D4EA75B319780D3A230735B1DB3146A51DFE3223EB1490ABD921
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
Behavioral task
behavioral1
Sample
arm6.elf
Resource
debian12-armhf-20260127-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target arm6.elf
- Size 365KB
- SHA256 16844ad274f6e2feeb212ab9fe5f27e22f77d4d7f402f036fb1b20c3a9175d77
- MD5 eb9583c6cb1c9eaa53bdea4b7acc67fb
- SHA1 a7da0abdbe9ee623e94de064a965f255b9861547
- SHA512 9907a9fe3cd4be6bf96f3f1f18ce450d3748ac591385070b671f216273ee710f160c1d77c921ebb8f372e837a4dec3513f129f3c75f207b1ab1af3df9088980b
- SSDEEP 6144:LOrFR5bbGOWY/nXSi8bPMe3YHHbU3wdPGotzzma9uP:yZzb5/nXSIecvGiOa9uP
- TLSH T1B084E888E1F1EBDAD1D4EA75B319780D3A230735B1DB3146A51DFE3223EB1490ABD921
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10Modifies Watchdog functionality
Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.
Traces itself
Traces itself to prevent debugging attempts
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.