Overview

overview

10

Static

static

7

boatnet.x86.elf

ubuntu-18.04-amd64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    boatnet.x86.elf

  • Size

    20KB

  • Sample

    230519-xyr7bsac6x

  • MD5

    1b513fea29e61cfc0c855df16f92f152

  • SHA1

    f56e5847f98b44b3706576e8270173bfadc5f404

  • SHA256

    b6c075cf7afb6189764c59ed02dfa9b520127adcda048964c0985f451b84dc0a

  • SHA512

    fb81084faf9dda3f8329ac855bb0bf8da6da31efef62ed634238aded7f4e1405f9c23fc0791347918fd5d4fd33e73dc70e67a823f465c49c6d52f2e567be8936

  • SSDEEP

    384:M87Lpj8s/qPui8uZxoIA57RWQjJiEVi+ZksavICMZDA5YqqUTwNIZT1n6Epl9zpj:R98o08kxofBE+ZksatoA5wUT1n6Ep3lv

Score
10/10
mirailzrdbotnetlinuxupx

Malware Config

Extracted

Family

mirai

Botnet

LZRD

Targets

    • Target

      boatnet.x86.elf

    • Size

      20KB

    • MD5

      1b513fea29e61cfc0c855df16f92f152

    • SHA1

      f56e5847f98b44b3706576e8270173bfadc5f404

    • SHA256

      b6c075cf7afb6189764c59ed02dfa9b520127adcda048964c0985f451b84dc0a

    • SHA512

      fb81084faf9dda3f8329ac855bb0bf8da6da31efef62ed634238aded7f4e1405f9c23fc0791347918fd5d4fd33e73dc70e67a823f465c49c6d52f2e567be8936

    • SSDEEP

      384:M87Lpj8s/qPui8uZxoIA57RWQjJiEVi+ZksavICMZDA5YqqUTwNIZT1n6Epl9zpj:R98o08kxofBE+ZksatoA5wUT1n6Ep3lv

    Score
    10/10
    mirailzrdbotnet

    • Mirai

      Mirai is a prevalent Linux malware infecting exposed network devices.

      botnetmirai

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    • Writes file to system bin folder

    behavioral1

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Hijack Execution Flow

1
T1574

Privilege Escalation

Hijack Execution Flow

1
T1574

Defense Evasion

Impair Defenses

1
T1562

Hijack Execution Flow

1
T1574

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks