Overview

overview

9

Static

static

boatnet.arm7

debian-9-armhf

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    boatnet.arm7

  • Size

    45KB

  • Sample

    220806-g67c8aeaa7

  • MD5

    dedb81a51e12e349d2b9a8f6c34c5aee

  • SHA1

    282cd96562ff764404fc71cb2ba09c0dbba7135e

  • SHA256

    47b96a431b32864f4592c8be1edfb3ed95214a10fd3762696461de775043e3e4

  • SHA512

    4e18cdc86a73aec23a8b355911f56c32177dca3ac85d6b71ebca4d0a8fe39c1ae79d24697a5f40048fdfb09c2d6d90dd2386fbe4ed31a385f2ef7bfb710c3bfe

Score
9/10

Malware Config

Targets

    • Target

      boatnet.arm7

    • Size

      45KB

    • MD5

      dedb81a51e12e349d2b9a8f6c34c5aee

    • SHA1

      282cd96562ff764404fc71cb2ba09c0dbba7135e

    • SHA256

      47b96a431b32864f4592c8be1edfb3ed95214a10fd3762696461de775043e3e4

    • SHA512

      4e18cdc86a73aec23a8b355911f56c32177dca3ac85d6b71ebca4d0a8fe39c1ae79d24697a5f40048fdfb09c2d6d90dd2386fbe4ed31a385f2ef7bfb710c3bfe

    Score
    9/10

    • Modifies the Watchdog daemon

      Malware like Mirai modify the Watchdog to prevent it restarting an infected system.

    • Writes file to system bin folder

    • Reads runtime system information

      Reads data from /proc virtual filesystem.

    behavioral1

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Hijack Execution Flow

1
T1574

Privilege Escalation

Hijack Execution Flow

1
T1574

Defense Evasion

Impair Defenses

1
T1562

Hijack Execution Flow

1
T1574

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks