Trusted Design

LuaBot: Malware targeting cable modems

概要

The malware targets Puma 5 (ARM/Big Endian) cable modems, including the ARRIS TG862 family. The infection happens in multiple stages and the dropper is very similar to many common worm that targets embedded devices from multiple architectures. The final stage is an ARMEB version from the LuaBot Malware.

Created: 2026-02-23

Indicators

• FileHash-MD5 - 889100a188a42369fd93e7010f7c654b -
• YARA - f292913b5aa7416b49c3970746b8625c4335a6df -
• FileHash-MD5 - 9df3372f058874fa964548cbb74c74bf -
• FileHash-MD5 - 061b03f8911c41ad18f417223840bce0 -
• FileHash-MD5 - c867d00e4ed65a4ae91ee65ee00271c7 -
• FileHash-MD5 - 4b8c0ec8b36c6bf679b3afcc6f54442a -
• FileHash-SHA1 - 89226865501ee7d399354656d870b4a9c02db1d3 -
• FileHash-MD5 - 5deb17c660de9d449675ab32048756ed -

類似Pulses

• TrojanDropper:MSIL/Habbo (score: 0.56)
• Net malware on Metadefender.com (score: 0.55)
• ELF binaries on consumer-grade gateway routers - pnscan 2 (score: 0.55)
• Linux/PnScan ; ELF worm (score: 0.54)
• Inor-aa malware on Metadefender.com (score: 0.54)

このPulseに関連する脅威アクター (事実ベース)

このPulseに関連する脅威アクター (推論ベース)

Related CVEs

このPulseに見つかったCVEはありません。

Pulse – 脅威アクター グラフ

---

← Pulse一覧に戻る