Extracted

• • Target

    boatnet.arm7.elf

  • Size

    53KB

  • MD5

    9418c6e826f9a42f4c390bda5028eb93

  • SHA1

    d804ec59a1b342e2c77d04a4b828490d25a92ef7

  • SHA256

    a3460c6dcfc74fe71a15491120b8294b97ba3748f3894e66fcf68d2e655f6676

  • SHA512

    d06d80359461addc25aa5410b2fe5e35aba52d0bbf21347f5287f9357fbf046a619dd47125da54a4b6cbdbdb5c4d4395f9b6286458dfff93aafaef2915011d07

  • SSDEEP

    768:/GJrriWrm5118Y+4xTuNqAcpPUQVvaLy9eu/bcpQhsNe6SLu9q3UELaLaMe25Ri7:/GripJhhxeRpBSLTLwOLH

  Score

  10^/10

  mirailzrdbotnetdefense_evasiondiscovery

  • Mirai

    Mirai is a prevalent Linux malware infecting exposed network devices.

    botnetmirai

  • Mirai family

    mirai

  • Modifies Watchdog functionality

    Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    defense_evasion

  • Enumerates running processes

    Discovers information about currently running processes on the system

  • Writes file to system bin folder

  behavioral1