General
-
Target
185.232.205.45-boatnet.arm-2025-01-03T235946.elf
-
Size
21KB
-
Sample
250104-ag6xts1kas
-
MD5
b435bea977ff7ad67adfc540a5727558
-
SHA1
fe21c0d1e31dac1b5b6ea3a167c2a2a8f6218f2a
-
SHA256
efe6416008e12f82ffe38db7aaeaa4575e0e6374b87681f2b1e8183348918848
-
SHA512
8e9f72b8b677d793cf8717fd7a4662b01c180093aa4e9a18e8de333dfc71cddcf3b001b35874f61a4931f1225313796a077e28a80b99f9cdf3cb70abf120d05d
-
SSDEEP
384:UvtIoZxrSniaXs+qx+bwqPX+VOcFd5fHq52lxjz1nL4hymdGUop5hX:UvQn4j+ZO5fKAlxP1nL4s3UozV
Behavioral task
behavioral1
Sample
185.232.205.45-boatnet.arm-2025-01-03T235946.elf
Resource
debian9-armhf-20240418-en
Malware Config
Extracted
mirai
LZRD
Targets
-
-
Target
185.232.205.45-boatnet.arm-2025-01-03T235946.elf
-
Size
21KB
-
MD5
b435bea977ff7ad67adfc540a5727558
-
SHA1
fe21c0d1e31dac1b5b6ea3a167c2a2a8f6218f2a
-
SHA256
efe6416008e12f82ffe38db7aaeaa4575e0e6374b87681f2b1e8183348918848
-
SHA512
8e9f72b8b677d793cf8717fd7a4662b01c180093aa4e9a18e8de333dfc71cddcf3b001b35874f61a4931f1225313796a077e28a80b99f9cdf3cb70abf120d05d
-
SSDEEP
384:UvtIoZxrSniaXs+qx+bwqPX+VOcFd5fHq52lxjz1nL4hymdGUop5hX:UvQn4j+ZO5fKAlxP1nL4s3UozV
Score10/10-
Mirai family
-
Modifies Watchdog functionality
Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.
-
Enumerates running processes
Discovers information about currently running processes on the system
-
Writes file to system bin folder
-