General

  • Target

    boatnet.mips.elf

  • Size

    23KB

  • Sample

    241201-cfkdjsxncn

  • MD5

    8382da11048313784c3fd74609540355

  • SHA1

    9d7b0e3c1043bb9d25bb03640007ff2cfa1ec388

  • SHA256

    eda14ff5a9e4aa41dfdbbd1897e165244c79a7fbc2e16190bf8c3af8036b7a53

  • SHA512

    9ba5663c354ba83ff920d918f3b664279dbf5a700de3d7cd36a50720bed4185e6a122e293403257225ff46bb26ea152c4d621e6f82388c9e7caa2d45eb146f63

  • SSDEEP

    384:YeD8ZSH2LLZUYyGZbsOiTrowSN9rnZMINlphQ/HYtuiOpwBmdtJgGlzDpH7uNj1g:YeD8ZSWvZHZbs1row697qohQvg9uyith

Malware Config

Extracted

Family

mirai

Botnet

LZRD

Targets

    • Target

      boatnet.mips.elf

    • Size

      23KB

    • MD5

      8382da11048313784c3fd74609540355

    • SHA1

      9d7b0e3c1043bb9d25bb03640007ff2cfa1ec388

    • SHA256

      eda14ff5a9e4aa41dfdbbd1897e165244c79a7fbc2e16190bf8c3af8036b7a53

    • SHA512

      9ba5663c354ba83ff920d918f3b664279dbf5a700de3d7cd36a50720bed4185e6a122e293403257225ff46bb26ea152c4d621e6f82388c9e7caa2d45eb146f63

    • SSDEEP

      384:YeD8ZSH2LLZUYyGZbsOiTrowSN9rnZMINlphQ/HYtuiOpwBmdtJgGlzDpH7uNj1g:YeD8ZSWvZHZbs1row697qohQvg9uyith

    • Mirai

      Mirai is a prevalent Linux malware infecting exposed network devices.

    • Mirai family

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    • Enumerates running processes

      Discovers information about currently running processes on the system

    • Writes file to system bin folder

MITRE ATT&CK Enterprise v15

Tasks