General
-
Target
37.202.222.79-boatnet.arm-2024-12-26T121426.elf
-
Size
29KB
-
Sample
241226-razcvaxmfl
-
MD5
369af9bb73a32ae11b6ee7d5984cd827
-
SHA1
506a24ab4f5192f2fdf7ad06a28689df5676b058
-
SHA256
9a00cf41844a52e5b84d8a44f8cdca24d40f8a2128d6ee9870a07139eb58db95
-
SHA512
ae52855c53c8b6390cd34c590e23eba7acbc7483673904d56501c3525f7f4b817b2b1fa124c24cd43ede5659a6f567fc4f71cd8d3f361c8f3a58bf958776a4df
-
SSDEEP
768:XuoBswxBxXLTJHmgVEjPT2naWFItenPCb8RgemAZ8QgCZ6Es3UozU:eKLxvJHD6TNWytePvZfLmzU
Behavioral task
behavioral1
Sample
37.202.222.79-boatnet.arm-2024-12-26T121426.elf
Resource
debian9-armhf-20240418-en
Malware Config
Extracted
mirai
LZRD
Targets
-
-
Target
37.202.222.79-boatnet.arm-2024-12-26T121426.elf
-
Size
29KB
-
MD5
369af9bb73a32ae11b6ee7d5984cd827
-
SHA1
506a24ab4f5192f2fdf7ad06a28689df5676b058
-
SHA256
9a00cf41844a52e5b84d8a44f8cdca24d40f8a2128d6ee9870a07139eb58db95
-
SHA512
ae52855c53c8b6390cd34c590e23eba7acbc7483673904d56501c3525f7f4b817b2b1fa124c24cd43ede5659a6f567fc4f71cd8d3f361c8f3a58bf958776a4df
-
SSDEEP
768:XuoBswxBxXLTJHmgVEjPT2naWFItenPCb8RgemAZ8QgCZ6Es3UozU:eKLxvJHD6TNWytePvZfLmzU
Score10/10-
Mirai family
-
Modifies Watchdog functionality
Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.
-
Enumerates running processes
Discovers information about currently running processes on the system
-
Writes file to system bin folder
-