General

  • Target

    boatnet.x86.elf

  • Size

    20KB

  • Sample

    230603-jrjdysga64

  • MD5

    e8cfeec55b3b0ebad37b4c90f02fcf47

  • SHA1

    758460207403d1a5efc53017cd68d2c4391f16c3

  • SHA256

    77fef2095480f4b7196d1d7a6f67aa6fd6638df096bad73404858f23912c7d85

  • SHA512

    d58b6fb62286e666c865354874e1c676640df28ce60b90c2e577bfae86d302d908bf1d13f1d68008bddb8f180046d622af6d6ca235d6da294b2d0dae4e49cef5

  • SSDEEP

    384:Mg/Lpj8s/qPui8uZxoIA57RWQjJiEVi+ZkXadmTb+502F2vwA9dWuMW21bAK1oTc:598o08kxofBE+ZkXaITbp2F2TWul0c5w

Malware Config

Extracted

Family

mirai

Botnet

LZRD

Targets

    • Target

      boatnet.x86.elf

    • Size

      20KB

    • MD5

      e8cfeec55b3b0ebad37b4c90f02fcf47

    • SHA1

      758460207403d1a5efc53017cd68d2c4391f16c3

    • SHA256

      77fef2095480f4b7196d1d7a6f67aa6fd6638df096bad73404858f23912c7d85

    • SHA512

      d58b6fb62286e666c865354874e1c676640df28ce60b90c2e577bfae86d302d908bf1d13f1d68008bddb8f180046d622af6d6ca235d6da294b2d0dae4e49cef5

    • SSDEEP

      384:Mg/Lpj8s/qPui8uZxoIA57RWQjJiEVi+ZkXadmTb+502F2vwA9dWuMW21bAK1oTc:598o08kxofBE+ZkXaITbp2F2TWul0c5w

    Score
    10/10
    • Mirai

      Mirai is a prevalent Linux malware infecting exposed network devices.

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    • Writes file to system bin folder

MITRE ATT&CK Enterprise v6

Tasks