General
-
Target
45.11.229.95-boatnet.arm7-2025-01-19T022231.elf
-
Size
53KB
-
Sample
250119-es4daswlgk
-
MD5
d3933f1cd5e7633906774078e050ca4f
-
SHA1
df8bddfc958fabc7c0105df9769b7a76ab3b1bcd
-
SHA256
131909f6e594c6b3199b32959ec4d128a9f4ea72d836e21a6bd9a3cc4e51bdfc
-
SHA512
6fa8a5425b641ed0968faabd6ad6b4e061d8946573f3cecad59aaa27cca56fc6fe4d2449d54f7b10efef5c6da6d61aa783137854a6edc82543113b3fbc3f90d1
-
SSDEEP
768:/GJrriWrm5118Y+4xTuNqAcpPUQVvaLy9eu/bcpQhsNe6jwFy9q3UELaLaMe25Ra:/GripJhhxeRpBjwVLwOLN
Behavioral task
behavioral1
Sample
45.11.229.95-boatnet.arm7-2025-01-19T022231.elf
Resource
debian9-armhf-20240611-en
Malware Config
Extracted
mirai
LZRD
Targets
-
-
Target
45.11.229.95-boatnet.arm7-2025-01-19T022231.elf
-
Size
53KB
-
MD5
d3933f1cd5e7633906774078e050ca4f
-
SHA1
df8bddfc958fabc7c0105df9769b7a76ab3b1bcd
-
SHA256
131909f6e594c6b3199b32959ec4d128a9f4ea72d836e21a6bd9a3cc4e51bdfc
-
SHA512
6fa8a5425b641ed0968faabd6ad6b4e061d8946573f3cecad59aaa27cca56fc6fe4d2449d54f7b10efef5c6da6d61aa783137854a6edc82543113b3fbc3f90d1
-
SSDEEP
768:/GJrriWrm5118Y+4xTuNqAcpPUQVvaLy9eu/bcpQhsNe6jwFy9q3UELaLaMe25Ra:/GripJhhxeRpBjwVLwOLN
Score10/10-
Mirai family
-
Modifies Watchdog functionality
Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.
-
Enumerates running processes
Discovers information about currently running processes on the system
-
Writes file to system bin folder
-