General
-
Target
boatnet.arm.elf
-
Size
21KB
-
Sample
250108-yrh6hs1mcx
-
MD5
58900fed7952b294f7b057ff63552ea1
-
SHA1
f81ad72565776a5c61401c4f9eacfefe12a6212b
-
SHA256
30e3f1d3cb76c4dff47828f0ab9c44d630edf08045592cf3dca3d635022a4ed8
-
SHA512
4d4f535983585ae2b6b18f87a74e4362394896e1427f1bb9d95877ed33b99a2824bb4a1cbb1279c4955cc1ddbd695fb2519252d68d8fcb325146592a818106fa
-
SSDEEP
384:vvtIoZxrSniaXs+qx+bwqPX+VOcFd5fHq52lxje+hymdGUop5hW:vvQn4j+ZO5fKAlx6+s3Uozk
Behavioral task
behavioral1
Sample
boatnet.arm.elf
Resource
debian9-armhf-20240611-en
Malware Config
Extracted
mirai
LZRD
Targets
-
-
Target
boatnet.arm.elf
-
Size
21KB
-
MD5
58900fed7952b294f7b057ff63552ea1
-
SHA1
f81ad72565776a5c61401c4f9eacfefe12a6212b
-
SHA256
30e3f1d3cb76c4dff47828f0ab9c44d630edf08045592cf3dca3d635022a4ed8
-
SHA512
4d4f535983585ae2b6b18f87a74e4362394896e1427f1bb9d95877ed33b99a2824bb4a1cbb1279c4955cc1ddbd695fb2519252d68d8fcb325146592a818106fa
-
SSDEEP
384:vvtIoZxrSniaXs+qx+bwqPX+VOcFd5fHq52lxje+hymdGUop5hW:vvQn4j+ZO5fKAlx6+s3Uozk
Score10/10-
Mirai family
-
Modifies Watchdog functionality
Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.
-
Enumerates running processes
Discovers information about currently running processes on the system
-
Writes file to system bin folder
-