General
-
Target
boatnet.arm.elf
-
Size
29KB
-
Sample
241231-p2p75s1lax
-
MD5
492eb0946ce5c123cf9414353a3360e9
-
SHA1
876100abaab274e24d173af56def3095227b817b
-
SHA256
e33bdf162a348f70df5b0210b1205710012958e22f43bd45d71c4e18368662fb
-
SHA512
faaafe71f169a40c0bb2caf1290b107230d2cff0716caa7276ec6a718cfa071deaea1864d9d43a1d4267828c9da6789a5339fcffc024cc831bb723a59a40eb6a
-
SSDEEP
768:wuoBswxBxXLTJHmgVEjPT2naWFItenPCb8RgemAZ8QQef8Cs3Uozv:xKLxvJHD6TNWytePvZfRfgzv
Behavioral task
behavioral1
Sample
boatnet.arm.elf
Resource
debian9-armhf-20240611-en
Malware Config
Extracted
mirai
LZRD
Targets
-
-
Target
boatnet.arm.elf
-
Size
29KB
-
MD5
492eb0946ce5c123cf9414353a3360e9
-
SHA1
876100abaab274e24d173af56def3095227b817b
-
SHA256
e33bdf162a348f70df5b0210b1205710012958e22f43bd45d71c4e18368662fb
-
SHA512
faaafe71f169a40c0bb2caf1290b107230d2cff0716caa7276ec6a718cfa071deaea1864d9d43a1d4267828c9da6789a5339fcffc024cc831bb723a59a40eb6a
-
SSDEEP
768:wuoBswxBxXLTJHmgVEjPT2naWFItenPCb8RgemAZ8QQef8Cs3Uozv:xKLxvJHD6TNWytePvZfRfgzv
Score10/10-
Mirai family
-
Modifies Watchdog functionality
Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.
-
Enumerates running processes
Discovers information about currently running processes on the system
-
Writes file to system bin folder
-