General
-
Target
boatnet.arm7.elf
-
Size
45KB
-
Sample
250121-2tc9tswjck
-
MD5
e4fbf2788f35a0195248ac665ccb5481
-
SHA1
f059d2748b8641740a48c03f67681df88d988dbd
-
SHA256
ae4bea1a68ba39315a25dbac371b7693d561e7eeb6932bdb7851146b25b6ce4a
-
SHA512
ffa2dd0b96213adbe5c14e6c1a8c2cb193493f18c3715af307d2aa3380fbad0aac72a15222b5a3233debad6bf3d87d469d60f77d33aa7bbecef3a61c8d2a81fd
-
SSDEEP
768:S/TYCoIxdEk+AxoTZAZHFeq8b3/E9q3UELbUXfi6nVMQHI4vcGpvZ:SECFd+A6YHAxFLRQZZ
Behavioral task
behavioral1
Sample
boatnet.arm7.elf
Resource
debian9-armhf-20240611-en
Malware Config
Extracted
mirai
LZRD
Targets
-
-
Target
boatnet.arm7.elf
-
Size
45KB
-
MD5
e4fbf2788f35a0195248ac665ccb5481
-
SHA1
f059d2748b8641740a48c03f67681df88d988dbd
-
SHA256
ae4bea1a68ba39315a25dbac371b7693d561e7eeb6932bdb7851146b25b6ce4a
-
SHA512
ffa2dd0b96213adbe5c14e6c1a8c2cb193493f18c3715af307d2aa3380fbad0aac72a15222b5a3233debad6bf3d87d469d60f77d33aa7bbecef3a61c8d2a81fd
-
SSDEEP
768:S/TYCoIxdEk+AxoTZAZHFeq8b3/E9q3UELbUXfi6nVMQHI4vcGpvZ:SECFd+A6YHAxFLRQZZ
Score10/10-
Mirai family
-
Modifies Watchdog functionality
Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.
-
Enumerates running processes
Discovers information about currently running processes on the system
-
Writes file to system bin folder
-