General
-
Target
109.71.252.43-boatnet.arm-2024-12-28T203037.elf
-
Size
21KB
-
Sample
241228-zsp6wssnaj
-
MD5
e7a22325e9ccbbad3c59f83ee4369244
-
SHA1
5c1ee586e6b3b2c18d736078ca54fbf9d732b61b
-
SHA256
3a4dc407c6b8c0154b5448f24f564304b1abd6ec46083db3a922dd0847cc3012
-
SHA512
bc78c24e9fbeee9328857be5a82dd11249177263f2c177584ed06d0b0144847ec87818c07e5e6ac13b44a8bf98a8a43082797402b541f7e68ee03ad9459332e5
-
SSDEEP
384:vvtIoZxrSniaXs+qx+bwqPX+VOcFd5fHq52lxjHfDrIhymdGUop5hW:vvQn4j+ZO5fKAlxzDMs3Uoz4
Behavioral task
behavioral1
Sample
109.71.252.43-boatnet.arm-2024-12-28T203037.elf
Resource
debian9-armhf-20240611-en
Malware Config
Extracted
mirai
LZRD
Targets
-
-
Target
109.71.252.43-boatnet.arm-2024-12-28T203037.elf
-
Size
21KB
-
MD5
e7a22325e9ccbbad3c59f83ee4369244
-
SHA1
5c1ee586e6b3b2c18d736078ca54fbf9d732b61b
-
SHA256
3a4dc407c6b8c0154b5448f24f564304b1abd6ec46083db3a922dd0847cc3012
-
SHA512
bc78c24e9fbeee9328857be5a82dd11249177263f2c177584ed06d0b0144847ec87818c07e5e6ac13b44a8bf98a8a43082797402b541f7e68ee03ad9459332e5
-
SSDEEP
384:vvtIoZxrSniaXs+qx+bwqPX+VOcFd5fHq52lxjHfDrIhymdGUop5hW:vvQn4j+ZO5fKAlxzDMs3Uoz4
Score10/10-
Mirai family
-
Modifies Watchdog functionality
Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.
-
Enumerates running processes
Discovers information about currently running processes on the system
-
Writes file to system bin folder
-