General
- Target arm6.elf
- Size 105KB
- Sample260914-ttpzmabf39
- SHA256 3d04a2dc8fd2ffbefb31e363c6a44a8185dabd6911414cb7d075d73e17093981
- MD5 290e07365da6a80e254affd84c731e48
- SHA1 e8b3d8b3b559787c82f743228055e1f9782241b6
- SHA512 70e3d7c112d59a36660d7f7da7fc53260d0a41d362021bb86f4dd38adb5f4ad3328c001a31dc2167521064e7ef04bf303acfafb154532b3886a79dc6f379708a
- SSDEEP 3072:/gazwz102cpveoPaRl+UfacSAI8ywMJ5:4azwz102cPPaRl+AS97J5
- TLSH T178B33959B9818B22C5C212BAFA1E128E331357B8E3DF73179D241F6477C696B0E7B901
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
arm6.elf
Resource
debian12-armhf-20260513-en
2 signatures
150 seconds
Malware Config
Extracted
Family
-
mirai
Botnet
-
OWARI
C2
-
194.41.112.119
Targets
-
- Target arm6.elf
- Size 105KB
- SHA256 3d04a2dc8fd2ffbefb31e363c6a44a8185dabd6911414cb7d075d73e17093981
- MD5 290e07365da6a80e254affd84c731e48
- SHA1 e8b3d8b3b559787c82f743228055e1f9782241b6
- SHA512 70e3d7c112d59a36660d7f7da7fc53260d0a41d362021bb86f4dd38adb5f4ad3328c001a31dc2167521064e7ef04bf303acfafb154532b3886a79dc6f379708a
- SSDEEP 3072:/gazwz102cpveoPaRl+UfacSAI8ywMJ5:4azwz102cPPaRl+AS97J5
- TLSH T178B33959B9818B22C5C212BAFA1E128E331357B8E3DF73179D241F6477C696B0E7B901
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Modifies Watchdog functionality
Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.