Overview

overview

10

Static

static

7

boatnet.x86.elf

ubuntu-18.04-amd64

10

Analysis

  • max time kernel
    152s
  • max time network
    102s
  • platform
    linux_amd64
  • resource
    ubuntu1804-amd64-en-20211208
  • resource tags

    arch:amd64arch:i386image:ubuntu1804-amd64-en-20211208kernel:4.15.0-161-genericlocale:en-usos:ubuntu-18.04-amd64system
  • submitted
    14/05/2023, 11:30

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    boatnet.x86.elf

  • Size

    20KB

  • MD5

    be8d693609ae90f6298ac8c8c266de14

  • SHA1

    32c7b2736849cf611408674f9dae5b2f254409b1

  • SHA256

    32f235cf162849caeafc87151cbd868b3d4f9aec63a7753fff5d96cdb82dae41

  • SHA512

    5ee0c6dd1ad213f6010aefd5661d65f980ce08db4cf9b104aa1a550d11479a923e512f8a73cd993e280a34a0b2cdc6bfabd6a4ada72afc57723f95822dbdb3a2

  • SSDEEP

    384:Mg9Lpj8s/qPui8uZxoIA57RWQjJiEVi+ZkXadmTb+502F2vwA9dWuMW21bAK1oT3:798o08kxofBE+ZkXaITbp2F2TWul0c5z

Score
10/10
mirailzrdbotnet

Malware Config

Extracted

Family

mirai

Botnet

LZRD

Signatures

  • Mirai

    Mirai is a prevalent Linux malware infecting exposed network devices.

    botnetmirai
  • Modifies the Watchdog daemon 1 TTPs

    Malware like Mirai modify the Watchdog to prevent it restarting an infected system.

  • Writes file to system bin folder 1 TTPs 2 IoCs
  • Reads runtime system information 16 IoCs

    Reads data from /proc virtual filesystem.

Processes

  • /tmp/boatnet.x86.elf
    /tmp/boatnet.x86.elf
    1⤵
      PID:596

    Network

    MITRE ATT&CK Enterprise v6

    Replay Monitor

    Loading Replay Monitor...

    Downloads