General
-
Target
159.100.14.33-boatnet.arm7-2024-12-25T143239.elf
-
Size
45KB
-
Sample
241225-snf9vswnds
-
MD5
ee14893e59b99c9999c59fc148dac737
-
SHA1
f47cc05ce490ee82244d2096144ec2926d3015d2
-
SHA256
c4fad1ec88bc396dc4ba7e1588d13d2aedb3150c4045a97462f3b44425f356e3
-
SHA512
3b24f9e50ff333399ace15368725f9f6528d30793c2f23079a2dfc9f6f33e2532a1abb6091f5d59f8b8c2e62509c54bb1663c72f85137adb10b5d2fd22b76391
-
SSDEEP
768:g/TYCoIxdEk+AxoTZAZHFeq8b3t9q3UELbUXfi6nVMQHI4vcGpva:gECFd+A6YHAxALRQZa
Behavioral task
behavioral1
Sample
159.100.14.33-boatnet.arm7-2024-12-25T143239.elf
Resource
debian12-armhf-20240729-en
Malware Config
Extracted
mirai
LZRD
Targets
-
-
Target
159.100.14.33-boatnet.arm7-2024-12-25T143239.elf
-
Size
45KB
-
MD5
ee14893e59b99c9999c59fc148dac737
-
SHA1
f47cc05ce490ee82244d2096144ec2926d3015d2
-
SHA256
c4fad1ec88bc396dc4ba7e1588d13d2aedb3150c4045a97462f3b44425f356e3
-
SHA512
3b24f9e50ff333399ace15368725f9f6528d30793c2f23079a2dfc9f6f33e2532a1abb6091f5d59f8b8c2e62509c54bb1663c72f85137adb10b5d2fd22b76391
-
SSDEEP
768:g/TYCoIxdEk+AxoTZAZHFeq8b3t9q3UELbUXfi6nVMQHI4vcGpva:gECFd+A6YHAxALRQZa
Score10/10-
Mirai family
-
Modifies Watchdog functionality
Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.
-
Writes file to system bin folder
-