Overview

overview

7

Static

static

5

boatnet.mips.elf

debian-9-mips

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    boatnet.mips.elf

  • Size

    16KB

  • Sample

    241120-adr99swjgw

  • MD5

    01fb43be3bc20a7ff87f41dbb15edf75

  • SHA1

    6cbfa8139b2d6ed77487ec839875c35e2480517c

  • SHA256

    833a6abba46a4e480fb74464151aa7dafba19b9d6518184bcc67f3738a349bb8

  • SHA512

    1955523efee42dcbb13263f39edab92ff728efa51ab7c444b7b0ca386461c59ac9b5fba9eaa9aa6a1086f9809cbd080a8ded0a72b76915a277a8aabd45bd464c

  • SSDEEP

    384:ZNdpOaAo78ruGmVDOU6wwFUUkWuvrC2vun7wSG6DTlCK6T6:ZHpOa/78rnmVlwBknD3vun7JfTwK6T6

Score
7/10
defense_evasiondiscoveryupx

Malware Config

Targets

    • Target

      boatnet.mips.elf

    • Size

      16KB

    • MD5

      01fb43be3bc20a7ff87f41dbb15edf75

    • SHA1

      6cbfa8139b2d6ed77487ec839875c35e2480517c

    • SHA256

      833a6abba46a4e480fb74464151aa7dafba19b9d6518184bcc67f3738a349bb8

    • SHA512

      1955523efee42dcbb13263f39edab92ff728efa51ab7c444b7b0ca386461c59ac9b5fba9eaa9aa6a1086f9809cbd080a8ded0a72b76915a277a8aabd45bd464c

    • SSDEEP

      384:ZNdpOaAo78ruGmVDOU6wwFUUkWuvrC2vun7wSG6DTlCK6T6:ZHpOa/78rnmVlwBknD3vun7JfTwK6T6

    Score
    7/10
    defense_evasiondiscovery

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

      defense_evasion

    • Renames itself

    • Unexpected DNS network traffic destination

      Network traffic to other servers than the configured DNS servers was detected on the DNS port.

    behavioral1

MITRE ATT&CK Enterprise v15

Tasks