General
-
Target
boatnet.arm7.elf
-
Size
45KB
-
Sample
250214-3msava1pbs
-
MD5
30e2a5faa9f0a3a176891682261e89f5
-
SHA1
812a5bb53986ccb21adbc582c4abf6413a1959fa
-
SHA256
1535853ed1b235db59792193b14a27b2b939ec5d571296441ff6ef435e10ecb1
-
SHA512
5b67ae27d5add96b2fabc3a2e5ea45abe9c05de7675e0cd5d5cfc6ecd234f9e7eda2e8dbcf621f9ab7a6fc6b0ec9cb56921432a91ee7b2c0cc300af8e85e324b
-
SSDEEP
768:g/TYCoIxdEk+AxoTZAZHFeq8b3kooR9q3UELbUXfi6nVMQHI4vcGpv8:gECFd+A6YHAxkonLRQZ8
Behavioral task
behavioral1
Sample
boatnet.arm7.elf
Resource
debian12-armhf-20240418-en
Malware Config
Extracted
mirai
LZRD
Targets
-
-
Target
boatnet.arm7.elf
-
Size
45KB
-
MD5
30e2a5faa9f0a3a176891682261e89f5
-
SHA1
812a5bb53986ccb21adbc582c4abf6413a1959fa
-
SHA256
1535853ed1b235db59792193b14a27b2b939ec5d571296441ff6ef435e10ecb1
-
SHA512
5b67ae27d5add96b2fabc3a2e5ea45abe9c05de7675e0cd5d5cfc6ecd234f9e7eda2e8dbcf621f9ab7a6fc6b0ec9cb56921432a91ee7b2c0cc300af8e85e324b
-
SSDEEP
768:g/TYCoIxdEk+AxoTZAZHFeq8b3kooR9q3UELbUXfi6nVMQHI4vcGpv8:gECFd+A6YHAxkonLRQZ8
Score10/10-
Mirai family
-
Modifies Watchdog functionality
Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.
-
Writes file to system bin folder
-