Analysis
- max time kernel
148s - max time network
151s - platform
debian-12_armhf - resource
debian12-armhf-20260513-en - resource tags
- submitted
28/10/2026, 10:48
General
- Target arm7.elf
- Size 353KB
- Sample261028-mwbfpazzft
- SHA256 d66d307c7f2ea700800ad4bd780cb22381b489a338ea2f292a798ed3c95a4cac
Score
7/10
Malware Config
Signatures
- Modifies Watchdog functionality 1 TTPs 2 IoCs
Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.
- Traces itself 1 IoCs
Traces itself to prevent debugging attempts
- Unexpected DNS network traffic destination 10 IoCs
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
- Changes its process name 4 IoCs
- Reads runtime system information 3 IoCs
Reads data from /proc virtual filesystem.
Processes
-
/tmp/arm7.elf/tmp/arm7.elf1⤵
- Modifies Watchdog functionality
- Traces itself
- Changes its process name
- Reads runtime system information