General
- Target boatnet.arm7.elf
- Size 219KB
- Sample260911-m2bzeasdrc
- SHA256 dfcd5d7a3d393236ac947b3af72dda094cdb059e1119ccadb9966e004ea87b81
- MD5 ffc7c97a12305397373667e56b8c9c08
- SHA1 14770f30fca2df8af07e3a4dddf31d4bf68c7d07
- SHA512 2682eda3215ea78a0cbdce78d701b0e0aed6813cfd9168341d118a456b5b0085e0e5a069342690fe66d9129e1bbc6b591c8bc063b70a675fb39faf38f3846805
- SSDEEP 6144:wemN2RYISMmiWc5d/anDsOZ2d/gwR6t1rpsGM/RdGwmH2WBLB5n:aN2RYISM5d/anDsOZ2Fv8Hsf/jGwmH1F
- TLSH T1AF242A46EA408F13C0D717BAF69F0245333397A5D3E7B306A924ABB43F8679E4E22515
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
boatnet.arm7.elf
Resource
debian12-armhf-20260127-en
3 signatures
150 seconds
Malware Config
Extracted
Family
-
mirai
Botnet
-
LZRD
C2
-
93.152.221.22
Targets
-
- Target boatnet.arm7.elf
- Size 219KB
- SHA256 dfcd5d7a3d393236ac947b3af72dda094cdb059e1119ccadb9966e004ea87b81
- MD5 ffc7c97a12305397373667e56b8c9c08
- SHA1 14770f30fca2df8af07e3a4dddf31d4bf68c7d07
- SHA512 2682eda3215ea78a0cbdce78d701b0e0aed6813cfd9168341d118a456b5b0085e0e5a069342690fe66d9129e1bbc6b591c8bc063b70a675fb39faf38f3846805
- SSDEEP 6144:wemN2RYISMmiWc5d/anDsOZ2d/gwR6t1rpsGM/RdGwmH2WBLB5n:aN2RYISM5d/anDsOZ2Fv8Hsf/jGwmH1F
- TLSH T1AF242A46EA408F13C0D717BAF69F0245333397A5D3E7B306A924ABB43F8679E4E22515
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Modifies Watchdog functionality
Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.
-
Writes file to system bin folder