Overview

overview

10

Static

static

5

boatnet.arm6.elf

debian-9-armhf

10

Analysis

  • max time kernel
    0s
  • platform
    debian-9_armhf
  • resource
    debian9-armhf-20240729-en
  • resource tags

    arch:armhfimage:debian9-armhf-20240729-enkernel:4.9.0-13-armmp-lpaelocale:en-usos:debian-9-armhfsystem
  • submitted
    10-02-2025 03:07

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    boatnet.arm6.elf

  • Size

    26KB

  • MD5

    d84fb936bdbc0ede49ae75c9e879e9f8

  • SHA1

    32100023b81594a3b0ebab590f18a0e35fa43b3f

  • SHA256

    138c84202b04d4f5bfabed26b0648c4acff16ef8a84f96affd2e8d4d36058bc6

  • SHA512

    8e8c4ff56cc445ebfbc21b4ed3f618e0b706d966de9929ece0b67ec8f136cfa45ca5ce68ca69c4b30ba36bfa887bbaf134c82d3f58444e247b95371d3aa9b388

  • SSDEEP

    768:eMKyhegCCMqfizjoNpd2vJdX6vwrh9q3UELuH:NKy4qfqoeJdXWgULi

Score
10/10
mirailzrdbotnetdiscovery

Malware Config

Extracted

Family

mirai

Botnet

LZRD

Signatures

  • Mirai

    Mirai is a prevalent Linux malware infecting exposed network devices.

    botnetmirai
  • Mirai family
    mirai
  • Reads runtime system information 1 IoCs

    Reads data from /proc virtual filesystem.

    discovery

Processes

  • /tmp/boatnet.arm6.elf
    /tmp/boatnet.arm6.elf
    1⤵
    • Reads runtime system information
    PID:660

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads