Extracted

• • Target

    boatnet.arm.elf

  • Size

    29KB

  • MD5

    989581954eedb96ace5ee16ba76bbfe6

  • SHA1

    c1d6f65361b685b9bb4cb0cee0d1c0fea0106c63

  • SHA256

    4686bb3e75091e937d915e634bd6f6ae44ef644eddd315aee84cb9bf13c78d8a

  • SHA512

    72b125d4542451a54e939abdda7699aa2d7317436d0f9daacc100e9330c2a5e5df3e8725481817a93d8eb251c3aa0bd224e6720df4dcbe1bc0fc011863dfd614

  • SSDEEP

    768:J8f+wPM743Xwz/cBjeUJhQBSzu7/OLYHws3Uoz7:JW5PNaJUJhO/OkHlz7

  Score

  10^/10

  mirailzrdbotnetdefense_evasiondiscovery

  • Mirai

    Mirai is a prevalent Linux malware infecting exposed network devices.

    botnetmirai

  • Mirai family

    mirai

  • Modifies Watchdog functionality

    Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    defense_evasion

  • Enumerates running processes

    Discovers information about currently running processes on the system

  • Writes file to system bin folder

  behavioral1