Extracted

• • Target

    boatnet.arm.elf

  • Size

    29KB

  • MD5

    71b871016be20fa759ba75949fe347c3

  • SHA1

    ede962eed2a0d0d2719a5effd5cd56853db8ad90

  • SHA256

    530c3553055b0b663df602f0c6c96dc0fc13bb083e05933c3e4302105c16df23

  • SHA512

    56d20794865aaf8c858a21d320a2b9c2a332109f95e3b3b851e92ca7543aabeb2ee76c03f2f86545cae5becfc0bbd21b207528a712d1c07d0ae44ca072d42a31

  • SSDEEP

    768:BuoBswxBxXLTJHmgVEjPT2naWFItenPCb8RgemAZ8QiPqBss3Uozz:UKLxvJHD6TNWytePvZfikzz

  Score

  10^/10

  mirailzrdbotnetdefense_evasiondiscovery

  • Mirai

    Mirai is a prevalent Linux malware infecting exposed network devices.

    botnetmirai

  • Mirai family

    mirai

  • Modifies Watchdog functionality

    Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    defense_evasion

  • Enumerates running processes

    Discovers information about currently running processes on the system

  • Writes file to system bin folder

  behavioral1