General
- Target armv6l.elf
- Size 117KB
- Sample261030-2e1ftagy5p
- SHA256 dd8de27e91664669406d97ebf52c5c8d2f7f6356705bd221841b80a6695ce7a6
- MD5 0a7945619836cdf7bbf6caf190e7ccb7
- SHA1 4c1567bb806d6b47613334f9d29892597abdb0fb
- SHA512 fc791cc86b0532791371388297921cf36668b38f11153d8cfb88c9aed59029445b4e6353cb99767c7e46d460aa9107a49a35e77c697104c62874cee0fef01912
- SSDEEP 3072:NwP00m+Urrar8+wG3if7zKeYw1Ljme3WwF:NwPe+U3aDVc7zKu1LjCwF
- TLSH T1C9C31901A9528A53C0C2177ABA9F41593723BB78D3DB3311DA14BFB42F476DF0E2A652
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
armv6l.elf
Resource
debian12-armhf-20260127-en
5 signatures
150 seconds
Malware Config
Extracted
Family
-
mirai
Botnet
-
MIRAI
Targets
-
- Target armv6l.elf
- Size 117KB
- SHA256 dd8de27e91664669406d97ebf52c5c8d2f7f6356705bd221841b80a6695ce7a6
- MD5 0a7945619836cdf7bbf6caf190e7ccb7
- SHA1 4c1567bb806d6b47613334f9d29892597abdb0fb
- SHA512 fc791cc86b0532791371388297921cf36668b38f11153d8cfb88c9aed59029445b4e6353cb99767c7e46d460aa9107a49a35e77c697104c62874cee0fef01912
- SSDEEP 3072:NwP00m+Urrar8+wG3if7zKeYw1Ljme3WwF:NwPe+U3aDVc7zKu1LjCwF
- TLSH T1C9C31901A9528A53C0C2177ABA9F41593723BB78D3DB3311DA14BFB42F476DF0E2A652
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Deletes itself
-
Modifies Watchdog functionality
Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.