General
-
Target
45.200.149.186-boatnet.arm-2024-12-28T012300.elf
-
Size
21KB
-
Sample
241228-cl9kmatndt
-
MD5
3eda2f6680311edb6fde1cbb70c1377a
-
SHA1
0a5eff32c5116c1d67056fa29ff09a9371d0c29e
-
SHA256
b59927d9759ef2ac0c2e6365b0d5c14bd24d410a3af35183dbae35d496dcc93f
-
SHA512
bf400c45c655077e56c8645ba4cf2999215aa2504664fa38477a4b7abadaf9975ac764fb38ea6cf32a7d5a84451a54da5f89e6bf204dfd77c3c409a7c0f0e20d
-
SSDEEP
384:vvtIoZxrSniaXs+qx+bwqPX+VOcFd5fHq52lxjHhymdGUop5hw:vvQn4j+ZO5fKAlxLs3Uozi
Behavioral task
behavioral1
Sample
45.200.149.186-boatnet.arm-2024-12-28T012300.elf
Resource
debian9-armhf-20240611-en
Malware Config
Extracted
mirai
LZRD
Targets
-
-
Target
45.200.149.186-boatnet.arm-2024-12-28T012300.elf
-
Size
21KB
-
MD5
3eda2f6680311edb6fde1cbb70c1377a
-
SHA1
0a5eff32c5116c1d67056fa29ff09a9371d0c29e
-
SHA256
b59927d9759ef2ac0c2e6365b0d5c14bd24d410a3af35183dbae35d496dcc93f
-
SHA512
bf400c45c655077e56c8645ba4cf2999215aa2504664fa38477a4b7abadaf9975ac764fb38ea6cf32a7d5a84451a54da5f89e6bf204dfd77c3c409a7c0f0e20d
-
SSDEEP
384:vvtIoZxrSniaXs+qx+bwqPX+VOcFd5fHq52lxjHhymdGUop5hw:vvQn4j+ZO5fKAlxLs3Uozi
Score10/10-
Mirai family
-
Modifies Watchdog functionality
Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.
-
Enumerates running processes
Discovers information about currently running processes on the system
-
Writes file to system bin folder
-