Extracted

• • Target

    boatnet.arm.elf

  • Size

    22KB

  • MD5

    344aceb5fb2b0fee2cad59972962b520

  • SHA1

    868591bf73e79a4c90bfb0de03dcd70ff640ffd4

  • SHA256

    6c2c4e3ad95f290b3ac878cd54706b2d232622f54fab0ca74c89faaebdc872db

  • SHA512

    d63a2b4230eeb98530e396e99d6f7f2cb1da1be5b4fa1d2492a377d078c454353e579b32531826efc1d1f33da48ba677b2bff2dd1a044b691e22323810e0c801

  • SSDEEP

    384:pfYiPvvajb9Omj5WXe76P0PCaNqgykvCggjVvuymQnhymdGUop5hB7:Hw2e76P3Oqq/gj5uAns3Uozb7

  Score

  10^/10

  mirailzrdbotnetdefense_evasiondiscovery

  • Mirai

    Mirai is a prevalent Linux malware infecting exposed network devices.

    botnetmirai

  • Mirai family

    mirai

  • Modifies Watchdog functionality

    Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    defense_evasion

  • Enumerates running processes

    Discovers information about currently running processes on the system

  • Writes file to system bin folder

  behavioral1