General
-
Target
boatnet.x86_64.elf
-
Size
25KB
-
Sample
240506-3bd9vaba36
-
MD5
4f6cf0b40a415773ca13429a35d828e5
-
SHA1
7c215ea3900aeffcf0658ac55168ae1556db3785
-
SHA256
29642627d91e46c9521d796f37b06af53ce26ccaa79b6a531c4646d8eb0a0bb7
-
SHA512
022a23b6c40164a7d669b30b3adf806b3ec122e62180fcb0bd45f7786fcf89ee0c9cf014e018d29341dcb8f21a1b713070e5efc98b95d86fc86dd15e1180b551
-
SSDEEP
768:VVVhKh+3d5fe3DhgLi/9ib4Ce1rx2YpJlrsYN:h4OvfeTh9NrlAYN
Malware Config
Extracted
mirai
LZRD
Targets
-
-
Target
boatnet.x86_64.elf
-
Size
25KB
-
MD5
4f6cf0b40a415773ca13429a35d828e5
-
SHA1
7c215ea3900aeffcf0658ac55168ae1556db3785
-
SHA256
29642627d91e46c9521d796f37b06af53ce26ccaa79b6a531c4646d8eb0a0bb7
-
SHA512
022a23b6c40164a7d669b30b3adf806b3ec122e62180fcb0bd45f7786fcf89ee0c9cf014e018d29341dcb8f21a1b713070e5efc98b95d86fc86dd15e1180b551
-
SSDEEP
768:VVVhKh+3d5fe3DhgLi/9ib4Ce1rx2YpJlrsYN:h4OvfeTh9NrlAYN
-
Modifies Watchdog functionality
Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.
-
Enumerates running processes
Discovers information about currently running processes on the system
-
Writes file to system bin folder
-