Extracted

• • Target

    boatnet.arm7.elf

  • Size

    45KB

  • MD5

    b152a146ce774136f27c2b655a5fd09c

  • SHA1

    e697534a5dfa419bc844fd251aa8e8958f5fbd6d

  • SHA256

    2d39189333d376c55e094617c4eff156d10abd040b7799d8bf87ccb7d3f429a5

  • SHA512

    c2e02619b6537df011783c2f8ed21788d7c7f3c23bc130da53056bd3c3be6c601014cfb6706946f1aaede0dd574673159f8d96ca140088a13be6b8b810c8e3f3

  • SSDEEP

    768:D/TYCoIxdEk+AxoTZAZHFeq8b3f9q3UELbUXfi6nVMQHI4vcGpvW:DECFd+A6YHAxOLRQZW

  Score

  10^/10

  mirailzrdbotnetdefense_evasiondiscovery

  • Mirai

    Mirai is a prevalent Linux malware infecting exposed network devices.

    botnetmirai

  • Mirai family

    mirai

  • Modifies Watchdog functionality

    Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    defense_evasion

  • Enumerates running processes

    Discovers information about currently running processes on the system

  • Writes file to system bin folder

  behavioral1