Extracted

• • Target

    boatnet.arm.elf

  • Size

    21KB

  • MD5

    d2d48ce176aacd3c36a278ab5083c132

  • SHA1

    5bb380d1cbbff2317496a66a32fc24e82342e974

  • SHA256

    3e6d0646c5dc991c38be691ea285f359878dc0c46b857dd6eb1af01b8aa21774

  • SHA512

    75f71e12366a65c777b785ca284dc2c2f3681ee20cc4a0c3a5d86756d649778b26f5102d301c0d78bd641ca831fadc695cdbaf512bfd2338256c1bb3f881e1f3

  • SSDEEP

    384:LnKKZ2YdA2Kg09gO1NMQ9KvrUM8Xobg9y0fxT3FvS4xrg+7lOBfYwhymdGUop5h7:LnKKZqFlgO1NMQ9KvrgoAyWB3FvS4xOy

  Score

  10^/10

  mirailzrdbotnetdefense_evasiondiscovery

  • Mirai

    Mirai is a prevalent Linux malware infecting exposed network devices.

    botnetmirai

  • Mirai family

    mirai

  • Modifies Watchdog functionality

    Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    defense_evasion

  • Enumerates running processes

    Discovers information about currently running processes on the system

  • Writes file to system bin folder

  behavioral1