General
-
Target
boatnet.arm7.elf
-
Size
45KB
-
Sample
241225-s5b2gaxjdw
-
MD5
5da6cd32bd2abbf9908323f804a84048
-
SHA1
b3cf93bf8e6dfe600c1e00e22646a8523b60e328
-
SHA256
c77a735aabf6e30a8ef722fda598b5cb4f278dca2bba4487c22d75f51c3db260
-
SHA512
f24c7789420b8bfd1991d7b9d0594d0b538f289b7d7fabf39e361628259047b797fdffd9af1e4f15b2ce27d707b3fc3788735760c7fae24d9ea77b851436fdae
-
SSDEEP
768:S/TYCoIxdEk+AxoTZAZHFeq8b3A9q3UELbUXfi6nVMQHI4vcGpva:SECFd+A6YHAxJLRQZa
Behavioral task
behavioral1
Sample
boatnet.arm7.elf
Resource
debian9-armhf-20240611-en
Malware Config
Extracted
mirai
LZRD
Targets
-
-
Target
boatnet.arm7.elf
-
Size
45KB
-
MD5
5da6cd32bd2abbf9908323f804a84048
-
SHA1
b3cf93bf8e6dfe600c1e00e22646a8523b60e328
-
SHA256
c77a735aabf6e30a8ef722fda598b5cb4f278dca2bba4487c22d75f51c3db260
-
SHA512
f24c7789420b8bfd1991d7b9d0594d0b538f289b7d7fabf39e361628259047b797fdffd9af1e4f15b2ce27d707b3fc3788735760c7fae24d9ea77b851436fdae
-
SSDEEP
768:S/TYCoIxdEk+AxoTZAZHFeq8b3A9q3UELbUXfi6nVMQHI4vcGpva:SECFd+A6YHAxJLRQZa
Score10/10-
Mirai family
-
Modifies Watchdog functionality
Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.
-
Enumerates running processes
Discovers information about currently running processes on the system
-
Writes file to system bin folder
-