General
- Target boatnet.arm7.elf
- Size 75KB
- Sample260525-16hjmsgv8q
- SHA256 42b0d0fd68da41b45fd9600bbf6561fda6adddac35adafc361357fd6cc87dc2f
- MD5 fc067b5b5f907d0b8525b5e9632438b3
- SHA1 819db907da2292af044c11e64dd4b86ae815ce47
- SHA512 1058e52d8dd1bcb19f681750949e86d8b70982646fe25f35182de46b130341de1e34898e65596f13581066a7cac85a24a7f339385b8bcdf7c43858eb7e9dcf18
- SSDEEP 1536:V8IHq+kgs7VI83wgrzlEFSPO/hcoiisjuq5Z14+CGKLtBcGXUqh9+sadEO3dzzUX:SIHq+kOQwgrBEEO/h7iF6q5v4+vKL052
- TLSH T16F7302083489E111EF110B76989928C98841A9D5D0ED71EF322A5E2DCDCFDA32DBFD97
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
boatnet.arm7.elf
Resource
debian12-armhf-20260513-en
4 signatures
150 seconds
Malware Config
Extracted
Family
-
mirai
Botnet
-
LZRD
Targets
-
- Target boatnet.arm7.elf
- Size 75KB
- SHA256 42b0d0fd68da41b45fd9600bbf6561fda6adddac35adafc361357fd6cc87dc2f
- MD5 fc067b5b5f907d0b8525b5e9632438b3
- SHA1 819db907da2292af044c11e64dd4b86ae815ce47
- SHA512 1058e52d8dd1bcb19f681750949e86d8b70982646fe25f35182de46b130341de1e34898e65596f13581066a7cac85a24a7f339385b8bcdf7c43858eb7e9dcf18
- SSDEEP 1536:V8IHq+kgs7VI83wgrzlEFSPO/hcoiisjuq5Z14+CGKLtBcGXUqh9+sadEO3dzzUX:SIHq+kOQwgrBEEO/h7iF6q5v4+vKL052
- TLSH T16F7302083489E111EF110B76989928C98841A9D5D0ED71EF322A5E2DCDCFDA32DBFD97
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies Watchdog functionality
Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.
-
Writes file to system bin folder