General
-
Target
37.114.41.228-boatnet.arm-2025-01-22T024958.elf
-
Size
21KB
-
Sample
250122-dnfwrsvnez
-
MD5
5c3bbfb420acd9bd904f458fa9cb78b6
-
SHA1
764465629929362c66bba209a2585d312f523b34
-
SHA256
a019845c30f3122f23e76d7dc3f98de6e7d61c47fc5e4a494e1354ade63eafaf
-
SHA512
8e47dfd8f4cb980bad6094a2afcbc74e0bfa5a2bc8223ec8e1388a1df8ed4bc0165773f91e58c20446cc5720f0a3d568ae91ac4bdc5a697177257cdf4aafce73
-
SSDEEP
384:cKNu+Vl2txfVHJBKPgd5AqzFpEhNCS5RVy+CY2/gQ6ipMNmqhymdGUop5hx:ciVnmtpIyLzAhIyRVFY/gtimmqs3Uozz
Behavioral task
behavioral1
Sample
37.114.41.228-boatnet.arm-2025-01-22T024958.elf
Resource
debian9-armhf-20240611-en
Malware Config
Extracted
mirai
LZRD
Targets
-
-
Target
37.114.41.228-boatnet.arm-2025-01-22T024958.elf
-
Size
21KB
-
MD5
5c3bbfb420acd9bd904f458fa9cb78b6
-
SHA1
764465629929362c66bba209a2585d312f523b34
-
SHA256
a019845c30f3122f23e76d7dc3f98de6e7d61c47fc5e4a494e1354ade63eafaf
-
SHA512
8e47dfd8f4cb980bad6094a2afcbc74e0bfa5a2bc8223ec8e1388a1df8ed4bc0165773f91e58c20446cc5720f0a3d568ae91ac4bdc5a697177257cdf4aafce73
-
SSDEEP
384:cKNu+Vl2txfVHJBKPgd5AqzFpEhNCS5RVy+CY2/gQ6ipMNmqhymdGUop5hx:ciVnmtpIyLzAhIyRVFY/gtimmqs3Uozz
Score10/10-
Mirai family
-
Modifies Watchdog functionality
Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.
-
Enumerates running processes
Discovers information about currently running processes on the system
-
Writes file to system bin folder
-