General
-
Target
boatnet.arm7.elf
-
Size
45KB
-
Sample
241201-lx88nstnfk
-
MD5
81957eaea2be9a29f5ed8d95e17bc7c9
-
SHA1
57f102c4412c7b18c5350bdc0e432b63ec9db0db
-
SHA256
0c37cfbe0b95bc0a4dbb2ba01a377e2a3a34182300d43b1af583790b944a4566
-
SHA512
3a07c650ceabd7654e3895ef04ea3c1e784d91cd4bd4f98558ecb5f5f0f0767ee70544fde93490896d8c27ed9f7e8b62fc3ae0e06a7194aa7d5b4d5b2df1bb98
-
SSDEEP
768:g/TYCoIxdEk+AxoTZAZHFeq8b31W9q3UELbUXfi6nVMQHI4vcGpvd:gECFd+A6YHAxZLRQZd
Behavioral task
behavioral1
Sample
boatnet.arm7.elf
Resource
debian12-armhf-20240221-en
Malware Config
Extracted
mirai
LZRD
Targets
-
-
Target
boatnet.arm7.elf
-
Size
45KB
-
MD5
81957eaea2be9a29f5ed8d95e17bc7c9
-
SHA1
57f102c4412c7b18c5350bdc0e432b63ec9db0db
-
SHA256
0c37cfbe0b95bc0a4dbb2ba01a377e2a3a34182300d43b1af583790b944a4566
-
SHA512
3a07c650ceabd7654e3895ef04ea3c1e784d91cd4bd4f98558ecb5f5f0f0767ee70544fde93490896d8c27ed9f7e8b62fc3ae0e06a7194aa7d5b4d5b2df1bb98
-
SSDEEP
768:g/TYCoIxdEk+AxoTZAZHFeq8b31W9q3UELbUXfi6nVMQHI4vcGpvd:gECFd+A6YHAxZLRQZd
Score10/10-
Mirai family
-
Modifies Watchdog functionality
Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.
-
Writes file to system bin folder
-