General

  • Target

    boatnet.mips.elf

  • Size

    23KB

  • Sample

    241101-etgkxsvmcs

  • MD5

    8aca2f6a521d99a7e1f3f934a5e2c6a2

  • SHA1

    4f9e6214e8552ad1d74a1ba9900656a758953b2c

  • SHA256

    e6d3afcf03038bb99f9b7ab5990c196f6bc250b7c3d7458546a1e05f47b6fc92

  • SHA512

    18d931811d83abdbb4e89837e50c7b5e3358b607cd23536fb804d158235fb8e55ec4da30944e5973f27318a1aa028d780dc13188308923ac80b6d9da270fef66

  • SSDEEP

    384:neD8ZSH2LLZUYyGZbsOiTrowSN9rnZMINlphQ/HYtuiLwmdzJgGlzDpH7uNj1JAd:neD8ZSWvZHZbs1row697qohQvg9sizJ7

Malware Config

Extracted

Family

mirai

Botnet

LZRD

Targets

    • Target

      boatnet.mips.elf

    • Size

      23KB

    • MD5

      8aca2f6a521d99a7e1f3f934a5e2c6a2

    • SHA1

      4f9e6214e8552ad1d74a1ba9900656a758953b2c

    • SHA256

      e6d3afcf03038bb99f9b7ab5990c196f6bc250b7c3d7458546a1e05f47b6fc92

    • SHA512

      18d931811d83abdbb4e89837e50c7b5e3358b607cd23536fb804d158235fb8e55ec4da30944e5973f27318a1aa028d780dc13188308923ac80b6d9da270fef66

    • SSDEEP

      384:neD8ZSH2LLZUYyGZbsOiTrowSN9rnZMINlphQ/HYtuiLwmdzJgGlzDpH7uNj1JAd:neD8ZSWvZHZbs1row697qohQvg9sizJ7

    • Mirai

      Mirai is a prevalent Linux malware infecting exposed network devices.

    • Mirai family

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    • Writes file to system bin folder

MITRE ATT&CK Enterprise v15

Tasks