Extracted

• • Target

    boatnet.arm.elf

  • Size

    21KB

  • MD5

    3542a40404e1b5ecf41032b37b08665f

  • SHA1

    a55bf781bfc7306352eabd2feb7d3ecab2d5710a

  • SHA256

    a8617314ddf4b5bc94f2863afe0867aa639d161a98ea6c8f697acf9f9b7379af

  • SHA512

    0035a67bc303c2b8f274beaea861f672b3ed24cd46c059fbebfad95ee6f5a78c716ea1714a2fc94ca31e900b7955056388529c3254706a75422e43d9af72d6b0

  • SSDEEP

    384:xvtIoZxrSniaXs+qx+bwqPX+VOcFd5fHq52lxj1ksphymdGUop5hS:xvQn4j+ZO5fKAlxJkqs3Uozs

  Score

  10^/10

  mirailzrdbotnetdefense_evasiondiscovery

  • Mirai

    Mirai is a prevalent Linux malware infecting exposed network devices.

    botnetmirai

  • Mirai family

    mirai

  • Modifies Watchdog functionality

    Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    defense_evasion

  • Enumerates running processes

    Discovers information about currently running processes on the system

  • Writes file to system bin folder

  behavioral1