General
- Target arm7
- Size 196KB
- Sample261102-ph62jsbz4j
- SHA256 8bd2ba21d2cc13916e0d15ac0d0208795926e45ff0977e7bb11553e117014119
- MD5 a9ae61e02602408c4e764dff7f2f295e
- SHA1 25b4c425e5e8e68900651ce07939c46e63920bb7
- SHA512 9dfb9cfeeaeb93b8b40cd0e85745b6299314fb9fd9d9a01b67f4dc20a565f0fef2b56b99c0aa6dd6a7aab4c390fd91011f86f9fe4807a4821f97a957f9eed50c
- SSDEEP 6144:szBEpbm3+UNYPXQ2IXWgWUq6UaqZJxxhShaEMXrjd+rS:9Vm3+kCQ2IxJUaqfhShaE2rjd
- TLSH T171141B46BDC19F02C5D226BAFABEC18933136FB8D3FB71128D215F6023865974E76A11
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
arm7
Resource
debian12-armhf-20260127-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target arm7
- Size 196KB
- SHA256 8bd2ba21d2cc13916e0d15ac0d0208795926e45ff0977e7bb11553e117014119
- MD5 a9ae61e02602408c4e764dff7f2f295e
- SHA1 25b4c425e5e8e68900651ce07939c46e63920bb7
- SHA512 9dfb9cfeeaeb93b8b40cd0e85745b6299314fb9fd9d9a01b67f4dc20a565f0fef2b56b99c0aa6dd6a7aab4c390fd91011f86f9fe4807a4821f97a957f9eed50c
- SSDEEP 6144:szBEpbm3+UNYPXQ2IXWgWUq6UaqZJxxhShaEMXrjd+rS:9Vm3+kCQ2IxJUaqfhShaE2rjd
- TLSH T171141B46BDC19F02C5D226BAFABEC18933136FB8D3FB71128D215F6023865974E76A11
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Modifies Watchdog functionality
Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.
-
Creates/modifies Cron job
Cron allows running tasks on a schedule, and is commonly used for malware persistence.
-
Enumerates running processes
Discovers information about currently running processes on the system
MITRE ATT&CK Enterprise v16
Persistence
Boot or Logon Autostart Execution
1Boot or Logon Initialization Scripts
1RC Scripts
1Scheduled Task/Job
1Cron
1