Extracted

• • Target

    boatnet.arm7.elf

  • Size

    45KB

  • MD5

    7b81230032eda0c976209e08e0f36f8d

  • SHA1

    a932a7360a93384e2205f552321ecc87f011c5b0

  • SHA256

    c2729a12005e0185fafbd2c71873cf60c6c472a2949faffb6a2f422c7dd2fdbe

  • SHA512

    1a5de3ab1be314123c6439de0c5568c5192b23abaa9c6ef118f06506cf20b2c66d1486e3f64f74659cc8f0761233fc1c4f90ed64e8f7db227f8f93e2935241b5

  • SSDEEP

    768:D/TYCoIxdEk+AxoTZAZHFeq8b3I99q3UELbUXfi6nVMQHI4vcGpvP:DECFd+A6YHAxIQLRQZP

  Score

  10^/10

  mirailzrdbotnetdefense_evasiondiscovery

  • Mirai

    Mirai is a prevalent Linux malware infecting exposed network devices.

    botnetmirai

  • Mirai family

    mirai

  • Modifies Watchdog functionality

    Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    defense_evasion

  • Enumerates running processes

    Discovers information about currently running processes on the system

  • Writes file to system bin folder

  behavioral1