Extracted

• • Target

    boatnet.arm.elf

  • Size

    21KB

  • MD5

    a50bda83f534eb13e565e252e38a10a5

  • SHA1

    c4383a0b7be85a20e68bde1551b14af2c4d095ca

  • SHA256

    8a797f73f237ef8d065f4f10fb02b15d436f7a6331e8b9a3a94735c2816ddfb2

  • SHA512

    62fc7b6d366882d4c7a27c6afb75d19d684138a9343e7fe0c61a691f7da402609eab0695ed5d1029db8b72f2c3eb7818f454cf6f783d1f9e4792ccc5c742fcfd

  • SSDEEP

    384:vvtIoZxrSniaXs+qx+bwqPX+VOcFd5fHq52lxjAhymdGUop5hP:vvQn4j+ZO5fKAlxks3Uozh

  Score

  10^/10

  mirailzrdbotnetdefense_evasiondiscovery

  • Mirai

    Mirai is a prevalent Linux malware infecting exposed network devices.

    botnetmirai

  • Mirai family

    mirai

  • Modifies Watchdog functionality

    Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    defense_evasion

  • Enumerates running processes

    Discovers information about currently running processes on the system

  • Writes file to system bin folder

  behavioral1