General
-
Target
193.200.78.24-boatnet.arm7-2025-01-21T101455.elf
-
Size
45KB
-
Sample
250121-m1nxkszrcl
-
MD5
ef0ed5900913788d9a7d956c1f166ef3
-
SHA1
607fa5a7a3e908b5bf3a3fda43ca62d366f14203
-
SHA256
971b15d0d74811c111cc9b95f1cad309377e44e79706b0a890fb38a20cdcddf3
-
SHA512
954a0cbe6455772801aa585bb18351226324f3a676f5d45c66b31e2545daeba28979911247a9ceb0154a1b494ce84ce0fc3db389cd191d136d11377e16e0530f
-
SSDEEP
768:D/TYCoIxdEk+AxoTZAZHFeq8b3e49q3UELbUXfi6nVMQHI4vcGpv8:DECFd+A6YHAxehLRQZ8
Behavioral task
behavioral1
Sample
193.200.78.24-boatnet.arm7-2025-01-21T101455.elf
Resource
debian12-armhf-20240221-en
Malware Config
Extracted
mirai
LZRD
Targets
-
-
Target
193.200.78.24-boatnet.arm7-2025-01-21T101455.elf
-
Size
45KB
-
MD5
ef0ed5900913788d9a7d956c1f166ef3
-
SHA1
607fa5a7a3e908b5bf3a3fda43ca62d366f14203
-
SHA256
971b15d0d74811c111cc9b95f1cad309377e44e79706b0a890fb38a20cdcddf3
-
SHA512
954a0cbe6455772801aa585bb18351226324f3a676f5d45c66b31e2545daeba28979911247a9ceb0154a1b494ce84ce0fc3db389cd191d136d11377e16e0530f
-
SSDEEP
768:D/TYCoIxdEk+AxoTZAZHFeq8b3e49q3UELbUXfi6nVMQHI4vcGpv8:DECFd+A6YHAxehLRQZ8
Score10/10-
Mirai family
-
Modifies Watchdog functionality
Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.
-
Writes file to system bin folder
-