General

  • Target

    boatnet.arm7.elf

  • Size

    45KB

  • Sample

    241101-etg7fswhke

  • MD5

    98edb1584f3a6c11397a02b23ba80c5c

  • SHA1

    fb7eebe1ebc6cdfd0441692580529c6863a49e90

  • SHA256

    d6afbee5c66eae6e50e517d95b1e3a6d0af4e45d0785152ba49caa409cd58127

  • SHA512

    acd76b449acda2d6fc6dc371d4871dabc6c920712ab4adc96bb3410b6f698e5ce38f2125a8514dcd0e3c2af05ece9adfba9221f6fd29a03645a42e10f8bae5e9

  • SSDEEP

    768:g/TYCoIxdEk+AxoTZAZHFeq8b3cCh9q3UELbUXfi6nVMQHI4vcGpv+:gECFd+A6YHAxc5LRQZ+

Malware Config

Extracted

Family

mirai

Botnet

LZRD

Targets

    • Target

      boatnet.arm7.elf

    • Size

      45KB

    • MD5

      98edb1584f3a6c11397a02b23ba80c5c

    • SHA1

      fb7eebe1ebc6cdfd0441692580529c6863a49e90

    • SHA256

      d6afbee5c66eae6e50e517d95b1e3a6d0af4e45d0785152ba49caa409cd58127

    • SHA512

      acd76b449acda2d6fc6dc371d4871dabc6c920712ab4adc96bb3410b6f698e5ce38f2125a8514dcd0e3c2af05ece9adfba9221f6fd29a03645a42e10f8bae5e9

    • SSDEEP

      768:g/TYCoIxdEk+AxoTZAZHFeq8b3cCh9q3UELbUXfi6nVMQHI4vcGpv+:gECFd+A6YHAxc5LRQZ+

    • Mirai

      Mirai is a prevalent Linux malware infecting exposed network devices.

    • Mirai family

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    • Writes file to system bin folder

MITRE ATT&CK Enterprise v15

Tasks