General

  • Target

    boatnet.arm6.elf

  • Size

    27KB

  • Sample

    241101-pgsgrsskbk

  • MD5

    2485917bb6e59da1a8b2fa73370d644a

  • SHA1

    9acda047df01a847ad51abf9e4be523afb38e45a

  • SHA256

    baf76d58b5e30edb164f5ae3c22398fc9aab2aad5c21eaf876ecd4ce8762c602

  • SHA512

    9839b6274434e492facaec45657155aaf7747ea36bcdf93c87277c13a39c3397e382d1ec25266945ce5dcfb5e6b3487a7a11db678d366984d60240bb6b49c632

  • SSDEEP

    768:2ZINbr6xD77SXNXnWQ5dhLsbST4MBByzM9q3UELW:6wrWoFJ1pT4MBB0VLW

Malware Config

Extracted

Family

mirai

Botnet

LZRD

Targets

    • Target

      boatnet.arm6.elf

    • Size

      27KB

    • MD5

      2485917bb6e59da1a8b2fa73370d644a

    • SHA1

      9acda047df01a847ad51abf9e4be523afb38e45a

    • SHA256

      baf76d58b5e30edb164f5ae3c22398fc9aab2aad5c21eaf876ecd4ce8762c602

    • SHA512

      9839b6274434e492facaec45657155aaf7747ea36bcdf93c87277c13a39c3397e382d1ec25266945ce5dcfb5e6b3487a7a11db678d366984d60240bb6b49c632

    • SSDEEP

      768:2ZINbr6xD77SXNXnWQ5dhLsbST4MBByzM9q3UELW:6wrWoFJ1pT4MBB0VLW

    • Mirai

      Mirai is a prevalent Linux malware infecting exposed network devices.

    • Mirai family

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    • Enumerates running processes

      Discovers information about currently running processes on the system

    • Writes file to system bin folder

MITRE ATT&CK Enterprise v15

Tasks