Extracted

• • Target

    boatnet.arm7.elf

  • Size

    45KB

  • MD5

    3af288dd8f7ed5bd8f3c06d549145029

  • SHA1

    2f2e3240ecd339e8062ea13b71b2f1555185d1a4

  • SHA256

    9a66e1e9d95c8f688cb9345a3ccdfe19495aa027fd90027d33e6a0aad564af90

  • SHA512

    a64c11ac737f8735b7c96dfd8ffa1342b6c3599b0d16b17f19414488dbb2f480f981fe8d607155bb64fc3301bc721b858466580f39d149a450c6f4d6936f94ec

  • SSDEEP

    768:D/TYCoIxdEk+AxoTZAZHFeq8b3z9q3UELbUXfi6nVMQHI4vcGpvM:DECFd+A6YHAxyLRQZM

  Score

  10^/10

  mirailzrdbotnetdefense_evasiondiscovery

  • Mirai

    Mirai is a prevalent Linux malware infecting exposed network devices.

    botnetmirai

  • Mirai family

    mirai

  • Modifies Watchdog functionality

    Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    defense_evasion

  • Enumerates running processes

    Discovers information about currently running processes on the system

  • Writes file to system bin folder

  behavioral1