General
- Target boatnet.arm7.elf
- Size 181KB
- Sample260601-gen3kacz8w
- SHA256 7c41f8f46c89e1b7cfb72f737ca2af22b3a9f263815b6bfc0500d997cdb4d4a0
- MD5 17590e7491122c0a77bf7ca35f6032e7
- SHA1 13e5f5bd798539d6e204048ae89e3b0ef7696295
- SHA512 329036f864cc702c9c53ad4dec3067e0a7cfb87e37a299f7c4c5302e3cdf374d7b1481d6b24a0947a406355bbc3cd22278561d3469b3bf9fef43df282baf115d
- SSDEEP 3072:XIDnSV5J1q4VKDeeLazo0ZwqK/T8T4JLMZHJ7ChKdeM/9+f6sf:XWnSV5J1q4VKfLazo0ZwqKr8TRJ7ChtF
- TLSH T18B045C46EA414F13C0D6177AB7AF42493322A7A5D3DB73069928AFB43FC275E0E63905
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
boatnet.arm7.elf
Resource
debian12-armhf-20260513-en
3 signatures
150 seconds
Malware Config
Extracted
Family
-
mirai
Botnet
-
LZRD
Targets
-
- Target boatnet.arm7.elf
- Size 181KB
- SHA256 7c41f8f46c89e1b7cfb72f737ca2af22b3a9f263815b6bfc0500d997cdb4d4a0
- MD5 17590e7491122c0a77bf7ca35f6032e7
- SHA1 13e5f5bd798539d6e204048ae89e3b0ef7696295
- SHA512 329036f864cc702c9c53ad4dec3067e0a7cfb87e37a299f7c4c5302e3cdf374d7b1481d6b24a0947a406355bbc3cd22278561d3469b3bf9fef43df282baf115d
- SSDEEP 3072:XIDnSV5J1q4VKDeeLazo0ZwqK/T8T4JLMZHJ7ChKdeM/9+f6sf:XWnSV5J1q4VKfLazo0ZwqKr8TRJ7ChtF
- TLSH T18B045C46EA414F13C0D6177AB7AF42493322A7A5D3DB73069928AFB43FC275E0E63905
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Modifies Watchdog functionality
Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.
-
Writes file to system bin folder