General
- Target boatnet.arm7.elf
- Size 130KB
- Sample260104-15ca8svjfl
- SHA256 9459c83416b00160e2d1dfaeb9b58cce0bd00d1c0d2ad0767f7ddd36343341cd
- MD5 8936750f863bb957f9545c03c0a3f485
- SHA1 cf3684274a0bfd2897bc4651ace64700c0996506
- SHA512 f158f8456cdc79aaa2a6c076078daa12478e0303e18a68c32261f86a054b80975864e17713f4574d013443a4e5563c5f2f347fa446dc555093ea5fd72c4f27a5
- SSDEEP 3072:5Jz9ot9292TuRoZubwxCyUWB/J1YnrHVfdM/9h5ZIiT:5Jz9ot9292Tu2ZubwxChWBhKnrH3M/9t
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Behavioral task
behavioral1
Sample
boatnet.arm7.elf
Resource
debian12-armhf-20251231-en
3 signatures
150 seconds
Malware Config
Extracted
Family
-
mirai
Botnet
-
LZRD
Targets
-
- Target boatnet.arm7.elf
- Size 130KB
- SHA256 9459c83416b00160e2d1dfaeb9b58cce0bd00d1c0d2ad0767f7ddd36343341cd
- MD5 8936750f863bb957f9545c03c0a3f485
- SHA1 cf3684274a0bfd2897bc4651ace64700c0996506
- SHA512 f158f8456cdc79aaa2a6c076078daa12478e0303e18a68c32261f86a054b80975864e17713f4574d013443a4e5563c5f2f347fa446dc555093ea5fd72c4f27a5
- SSDEEP 3072:5Jz9ot9292TuRoZubwxCyUWB/J1YnrHVfdM/9h5ZIiT:5Jz9ot9292Tu2ZubwxChWBhKnrH3M/9t
- MD5 SHA1 SHA512 SSDEEP
Score7/10-
Modifies Watchdog functionality
Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.
-
Writes file to system bin folder